Skip to content
This repository has been archived by the owner on May 17, 2024. It is now read-only.

Update dependency laravel/framework to v6 #43

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

This PR contains the following updates:

Package Type Update Change
laravel/framework (source) require major 5.8.* -> 6.20.*

By merging this PR, the issue #34 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2021-43617
Critical Critical 9.8 WS-2020-0144
High High 7.5 CVE-2020-24941
High High 7.5 WS-2020-0139
Medium Medium 6.1 CVE-2021-43808
Medium Medium 5.3 CVE-2021-21263

Release Notes

laravel/framework (laravel/framework)

v6.20.42

Compare Source

Fixed
  • Fixed for dropping columns when using MSSQL as (#​39905)
  • Fixed parent call in View (#​39908)

v6.20.41

Compare Source

Added
  • Added phar to list of shouldBlockPhpUpload() in validator (2d1f76a)

v6.20.40

Compare Source

Fixed
  • Fixes Illuminate/Database/Query/Builder::limit() to only cast integer when given other than null (#​39644)

v6.20.39

Compare Source

Fixed
  • Fixed $value in Illuminate/Database/Query/Builder::limit() (ddfa71e)

v6.20.38

Compare Source

Added
  • Added new lost connection error message for sqlsrv (#​39466)

v6.20.37

Compare Source

Fixed
  • Fixed rate limiting unicode issue (#​39375)

v6.20.36

Compare Source

Fixed
  • Add new lost connection message to DetectsLostConnections for Vapor (#​39209)

v6.20.35

Compare Source

Added
  • Added new lost connection message to DetectsLostConnections (#​39028)

v6.20.34

Compare Source

Fixed
  • Silence validator date parse warnings (#​38670)

v6.20.33

Compare Source

Changed
  • Error out when detecting incompatible DBAL version (#​38543)

v6.20.32

Compare Source

Fixed

v6.20.31

Compare Source

Fixed
Refactoring
  • Remove hardcoded Carbon reference from scheduler event (#​38063)

v6.20.30

Compare Source

Fixed
  • Fix edge case causing a BadMethodCallExceptions to be thrown when using loadMissing() (#​37871)

v6.20.29

Compare Source

Changed
  • Removed unnecessary checks in RequiredIf validation, fixed tests (#​37700)

v6.20.28

Compare Source

Fixed
  • Fixed dns_get_record loose check of A records for active_url rule (#​37675)
  • Type hinted arguments for Illuminate\Validation\Rules\RequiredIf (#​37688)
  • Fixed when passed object as parameters to scopes method (#​37692)

v6.20.27

Compare Source

Added
  • Support mass assignment to SQL Server views (#​37307)
Fixed
  • Fixed Illuminate\Database\Query\Builder::offset() with non numbers $value (#​37164)
  • Fixed unless rules (#​37291)
Changed
  • Allow reporting reportable exceptions with the default logger (#​37235)

v6.20.26

Compare Source

Fixed
  • Fixed Cache store with a name other than 'dynamodb' (#​37145)
Changed
  • Some cast to int in Illuminate\Database\Query\Grammars\SqlServerGrammar (09bf145)

v6.20.25

Compare Source

Fixed

v6.20.24

Compare Source

Fixed
  • Fixed required_if boolean validation (#​36969)

v6.20.23

Compare Source

Added
  • Added strings to the DetectsLostConnections.php (4210258)

v6.20.22

Compare Source

Fixed
  • Fixed setting DynamoDB credentials (#​36822)

v6.20.21

Compare Source

Added
  • Added support of DynamoDB in CI suite (#​36749)
  • Support username parameter for predis (#​36762)
Changed
  • Use qualified column names in pivot query (#​36720)

v6.20.20

Compare Source

Added
  • Added WSREP communication link failure for lost connection detection (#​36668)
Fixed
  • Fixes the issue using cache:clear with PhpRedis and a clustered Redis instance. (#​36665)

v6.20.19

Compare Source

Added
  • Added broken pipe exception as lost connection error (#​36601)

v6.20.18

Compare Source

Fixed
  • Fix validator treating null as true for (required|exclude)_(if|unless) due to loose in_array() check (#​36504)
Changed
  • Delete existing links that are broken in Illuminate\Foundation\Console\StorageLinkCommand (#​36470)

v6.20.17

Compare Source

Added
  • Added new line to DetectsLostConnections (#​36373)

v6.20.16

Compare Source

Fixed
  • Fixed Illuminate\View\ViewException::report() (#​36110)
  • Fixed Illuminate\Redis\Connections\PhpRedisConnection::spop() (#​36106)
Changed
  • Typecast page number as integer in Illuminate\Pagination\AbstractPaginator::resolveCurrentPage() (#​36055)

v6.20.15

Compare Source

Changed
  • Pipe new through render and report exception methods (#​36037)

v6.20.14

Compare Source

Fixed
  • Fixed type error in Illuminate\Http\Concerns\InteractsWithContentTypes::isJson() (#​35956)
  • Limit expected bindings (#​35972, 006873d)

v6.20.13

Compare Source

Fixed

v6.20.12

Compare Source

v6.20.11

Compare Source

Fixed

v6.20.10

Compare Source

Added
  • Added new line to DetectsLostConnections (#​35790)
Fixed
  • Fixed error from missing null check on PHP 8 in Illuminate\Validation\Concerns\ValidatesAttributes::validateJson() (#​35797)

v6.20.9

Compare Source

Added

v6.20.8

Compare Source

Fixed
  • Fixed Illuminate\Validation\Concerns\ValidatesAttributes::validateJson() for PHP8 (#​35646)
  • Catch DecryptException with invalid X-XSRF-TOKEN in Illuminate\Foundation\Http\Middleware\VerifyCsrfToken (#​35671)

v6.20.7

Compare Source

Fixed
  • Backport for fix issue with polymorphic morphMaps with literal 0 (#​35487)
  • Fixed mime validation for jpeg files (#​35518)

v6.20.6

Compare Source

Fixed
  • Backport Redis context option (#​35370)
  • Fixed validating image/jpeg images after Symfony/Mime update (#​35419)

v6.20.5

Compare Source

Fixed
  • Fixing BroadcastException message in PusherBroadcaster@broadcast (#​35290)
  • Fixed generic DetectsLostConnection string (#​35323)
Changed
  • Updated aws/aws-sdk-php suggest to ^3.155 (#​35267)

v6.20.4

Compare Source

Fixed

v6.20.3

Compare Source

Fixed
  • Turn the eloquent collection into a base collection if mapWithKeys loses models (#​35129)

v6.20.2

Compare Source

Fixed

v6.20.1

Compare Source

Fixed
  • Fixed alias usage in Eloquent (6091048)
  • Fixed Illuminate\Support\Reflector::isCallable() (a90f344)

v6.20.0

Compare Source

v6.20.0 (2020-10-28)

Added
Changed
  • Bump minimum PHP version to v7.2.5 (#​34928)
Fixed
  • Fixed ambigious column on many to many with select load (5007986)

v6.19.1

Compare Source

Fixed

v6.19.0

Compare Source

Added

v6.18.43

Compare Source

Fixed
  • Matched symfony/debug version with other symfony reqs (6ce02a2)

v6.18.42

Compare Source

Fixed
  • Added missed RESET_THROTTLED constant to Password Facade (#​34641)

v6.18.41

Compare Source

Fixed
  • Added support for stream reads in FileManager for S3 driver (#​34480)

v6.18.40

Compare Source

Revert

v6.18.39

Compare Source

Fixed
  • Fixed for empty fallback_locale in Illuminate\Translation\Translator (#​34136)

v6.18.38

Compare Source

Changed

v6.18.37

Compare Source

Fixed
  • Fixed offset error on invalid remember token (#​34020)
  • Only prepend scheme to PhpRedis host when necessary (#​34017)
  • Fixed whereKey and whereKeyNot in Illuminate\Database\Eloquent\Builder (#​34031)

v6.18.36

Compare Source

Fixed
  • Fix dimension ratio calculation in Illuminate\Validation\Concerns\ValidatesAttributes::failsRatioCheck() (#​34003)
Changed
  • Normalize scheme in Redis connections (#​33892)
  • Check no-interaction flag exists and is true for Artisan commands (#​33950)

v6.18.35

Compare Source

Changed
  • Verify column names are actual columns when using guarded (#​33777)

v6.18.34

Compare Source

v6.18.34 (2020-08-06)

Fixed
  • Fixed Illuminate\Support\Arr::query() (c6f9ae2)
  • Dont allow mass filling with table names (9240404, f5fa6e3)

v6.18.33

Compare Source

Fixed

v6.18.32

Compare Source

Changed
  • Ignore numeric field names in validators (#​33712)
  • Fixed validation rule 'required_unless' when other field value is boolean. (#​33715)

v6.18.31

Compare Source

Update
  • Update cookies encryption (release)

v6.18.30

Compare Source

Update
  • Update cookies encryption (release)

v6.18.29

Compare Source

Fixed

v6.18.28

Compare Source

Fixed

v6.18.27

Compare Source

Fixed
  • Dont decrement transaction below 0 in Illuminate\Database\Concerns\ManagesTransactions::handleCommitTransactionException() (7681795)
  • Fixed transaction problems on closure transaction (c4cdfc7)
  • Prevent to serialize uninitialized properties (#​33644)
  • Fixed missing statement preventing deletion in Illuminate\Database\Eloquent\Relations\MorphPivot::delete() (#​33648)
Changed

v6.18.26

Compare Source

Fixed
  • Align (fix) nested arrays support for assertViewHas & assertViewMissing in Illuminate\Testing\TestResponse (#​33566)

v6.18.25

Compare Source

Fixed
  • Fixed Illuminate\Cache\FileStore::flush() (#​33458)
  • Fixed auto creating model by class name (#​33481)
  • Don't return nested data from validator when failing an exclude rule (#​33435)
  • Fixed validation nested error messages (6615371)
  • Fixed Illuminate\Support\Reflector to handle parent (#​33502)
Revert

v6.18.24

Compare Source

Fixed
  • Fixed notifications database channel for anonymous notifiables (#​33409)
  • Added float comparison null checks (#​33421)
  • Improve SQL Server last insert id retrieval (#​33453)

v6.18.23

Compare Source

Fixed
  • Fixed ConfigurationUrlParser query decoding (#​33340)
  • Correct implementation of float casting comparison (#​33322)

v6.18.22

Compare Source

Revert

v6.18.21

Compare Source

v6.18.21 (2020-06-23)

Fixed

v6.18.20

Compare Source

Changed

v6.18.19

Compare Source

Fixed
  • Fixed Model::withoutEvents() not registering listeners inside boot() (#​33149, 4bb32ae)

v6.18.18

Compare Source

Fixed
  • Fixed Illuminate\Database\Eloquent\Relations\MorphToMany::getCurrentlyAttachedPivots() (110b129)

v6.18.17

Compare Source

Added
Fixed
  • Fixed Illuminate\Database\Eloquent\Collection::getQueueableRelations() (00e9ed7)
  • Fixed bug with update existing pivot and polymorphic many to many (684208b)

v6.18.16

Compare Source

v6.18.15

Compare Source

Added
  • Added Illuminate\Http\Middleware\TrustHosts (9229264)
Fixed
Changed
  • Added explicit symfony/polyfill-php73 dependency (5796b1e)
  • Set Cache\FileStore file permissions only once (#​32845, 11c533b)

v6.18.14

Compare Source

Added
  • Added SSL SYSCALL EOF as a lost connection message (#​32697)
Fixed
  • Fixed FakerGenerator Unique caching issue (#​32703)
  • Added boolean to types that don't need character options (#​32716)
  • Fixed Illuminate\Foundation\Testing\PendingCommand that do not resolve 'OutputStyle::class' from the container (#​32687)
  • Clear resolved event facade on Illuminate\Foundation\Testing\Concerns\MocksApplicationServices::withoutEvents() (d1e7f85)
  • Fixed deprecated "Doctrine/Common/Inflector/Inflector" class (#​32734)
Changed
  • Remove the undocumented dot keys support in validators (#​32764)
  • Remove strval from Illuminate/Validation/ValidationRuleParser::explodeWildcardRules() 1c76a6f

v6.18.13

Compare Source

Fixed
  • Fixed Illuminate\Database\Eloquent\Collection::getQueueableRelations() (7b32460)

v6.18.12

Compare Source

Added
  • Add pdo try again as lost connection message (#​32605)
Fixed
  • Fixed Illuminate\Foundation\Testing\TestResponse::assertSessionHasInput() (f0639fd)
  • Set relation connection on eager loaded MorphTo (#​32602)
  • Fixed Illuminate\Database\Schema\Grammars\SqlServerGrammar::compileDropDefaultConstraint() was ignoring Table prefixes (#​32606)
  • Filtering null's in hasMorph() (#​32614)
  • Fixed Illuminate\Console\Scheduling\Schedule::compileParameters() (cfc3ac9, 36e215d)
  • Fixed bug with model name in Illuminate\Database\Eloquent\RelationNotFoundException::make() (f72a166)
  • Fixed Illuminate\Foundation\Testing\TestResponse::assertJsonCount() not accepting falsey keys (#​32655)
Changed
  • Changed Illuminate/Database/Eloquent/Relations/Concerns/AsPivot::fromRawAttributes() (6c502c1)
  • Restore оnly common relations (#​32613, d82f78b, 48e4d60)
  • Use single space if plain email is empty in Illuminate\Mail\Mailer::addContent() (0557622)
  • Remove wasted file read when loading package manifest in Illuminate\Foundation\PackageManifest::getManifest() (#​32646)
  • Cache FakerGenerator instances (#​32585)
  • Do not change character and collation for some columns on change (fccdf7c)

v6.18.11

Compare Source

Fixed
  • Auth with each master on flushdb (d0afa58)
  • Clear resolved facades earlier (f2ea1a2)
  • Register opis key so it is not tied to a deferred service provider (a4574ea)
  • Pass status code to schedule finish (b815dc6)
  • Fix firstWhere behavior for relations (#​32525)
  • Fix boolean value in assertSessionHasErrors (#​32555)

v6.18.10

Compare Source

Fixed

v6.18.9

Compare Source

Fixed
  • Fix refresh() to support AsPivot trait (#​32420)
  • Fix orderBy with callable (#​32471)

v6.18.8

Compare Source

Fixed
  • Removed dots (e78d24f)
  • Duplicated mailable in-memory data attachments with different names (#​32392)
  • Fix a regression caused by #​32315 (#​32388)
  • Duplicated mailable storage attachments with different names (#​32394)

v6.18.7

Compare Source

Fixed
  • Call setlocale (1c6a504)
  • Use a map to prevent unnecessary array access (#​32296)
  • Prevent timestamp update when pivot is not dirty (#​32311)
  • Add support for the new composer installed.json format (#​32310)
  • ValidatesAttributes::validateUrl use Symfony/Validator 5.0.7 regex (#​32315)
  • Fix *scan methods for phpredis (#​32336)
  • Use the router for absolute urls (#​32345)

v6.18.6

Compare Source

Security
  • Prevent insecure characters in locale (c248521)

v6.18.5

Compare Source

Fixed
  • Revert "Fix setting mail header" (#​32278)

v6.18.4

Compare Source

Fixed
  • Added missing return in the sendNow pending mail fake (#​32095)
  • Prevent long URLs from breaking email layouts (#​32189)
  • Fix setting mail header (#​32272)

v6.18.3

Compare Source

Fixed

v6.18.2

Compare Source

Fixed
  • Fixed scheduler dependency assumptions (#​31894)
  • Corrected suggested dependencies (bb0ec42)
  • Unset pivotParent on Pivot::unsetRelations() (#​31956)
  • Fixed cookie helper signature , matching match CookieFactory (#​31974)

v6.18.1

Compare Source

Fixed
  • Fixed array lock release behavior (#​31795)
  • Fixed model restoring right after being soft deleting (#​31719)
  • Fixed phpredis "zadd" and "exists" on cluster (#​31838)
  • Fixed "srid" mysql schema (#​31852)
  • Fixed Microsoft ODBC lost connection handling (#​31879)

v6.18.0

Compare Source

Added
Fixed
  • Use correct locale when resolving Faker from the container (#​31615)
  • Fixed loading deferred providers for binding interfaces and implementations (#​31629, 1764ff7)
Changed
  • Make newPivotQuery() method public (#​31677)
  • Allowed easier customization of the queued mailable job (#​31684)
  • Expose Notification Id within Message Data in Illuminate\Notifications\Channels\MailChannel (#​31632)

v6.17.1

Compare Source

v6.17.1 (2020-02-26)

Changed
  • Don`t do chmod in File cache in case if permission not set (#​31593)

v6.17.0

Compare Source

Added
  • Allowed private-encrypted pusher channels (#​31559, ceabaef, 8215e0d)
  • Added file permission config option for the File cache store (#​31579)
  • Added Connection refused and running with the --read-only option so it cannot execute this statement to DetectsLostConnections (#​31539)
Reverted
Fixed
  • Fixed issue Content Type not specified (#​31533)
Changed
  • Allowed cache helper to have an optional expiration parameter (#​31554)
  • Allowed passing of strings to TestResponse::dumpSession() method (#​31583)
  • Consider mailto: and tel: links in the subcopy actionUrl label in emails (#​31523, 641a7cd)
  • Exclude mariaDB from database queue support for new SKIP LOCKED (fff96e7)

v6.16.0

Compare Source

Added
  • Added Guzzle 7 support (#​31484)
  • Added Illuminate\Database\Query\Builder::groupByRaw() (#​31498)
  • Added SQLite JSON update support with json_patch (#​31492)
Fixed
  • Fixed appendRow on console table (#​31469)
  • Fixed password check in EloquentUserProvider::retrieveByCredentials() (4436662)
Revert
  • Revert table feature in the console output (4094d78)
Changed
  • Change MySql nullable modifier to allow generated columns to be not null (#​31452)
  • Throw exception on empty collection in assertSentTo() \ assertNotSentTo() methods in NotificationFake class (#​31471)

v6.15.1

Compare Source

Added
  • Added whereNull and whereNotNull to Collection (#​31425)
  • Added Illuminate\Foundation\Testing\MockStream class (#​31447)
Fixed
  • Fixed event:list command for shows non-registered events (#​31444)
  • Fixed postgres grammar for nested json arrays with (#​31448, b3d0da1)

v6.15.0

Compare Source

Added
  • Added Illuminate\Auth\Events\Validated event (#​31357, 7ddac28)
  • Make Blueprint support Grammar's macro (#​31365)
  • Added Macroable trait to Illuminate\Console\Scheduling\Schedule class (#​31354)
  • Added support dispatchAfterResponse in BusFake (#​31418, e59597f)
  • Added Illuminate\Foundation\Exceptions\Handler::getHttpExceptionView() (#​31420)
  • Allowed appending of rows to Artisan tables (#​31426)
Fixed
  • Fixed locks for sqlsrv queue (5868066)
  • Fixed Illuminate\Events\Dispatcher::hasListeners() (#​31403, c80302e)
  • Fixed testing with unencrypted cookies (#​31390)
Changed
  • Allowed multiple paths to be passed to migrate fresh and migrate refresh commands (#​31381)
  • Split Console InteractsWithIO to external trait (#​31376)
  • Added sms link as valid URL in UrlGenerator::isValid() method (#​31382)
  • Upgrade CommonMark and use the bundled table extension (#​31411)
  • Ensure Application::$terminatingCallbacks are reset on Application::flush() (#​31413)
  • Remove serializer option in PhpRedisConnector::createClient() (#​31417)

v6.14.0

Compare Source

Added
  • Added Illuminate\Bus\Dispatcher::dispatchAfterResponse() method (#​31300, 8a3cdb0)
  • Added Illuminate\Support\Testing\Fakes\QueueFake::assertPushedWithoutChain() method (#​31332, 7fcc6b5)
  • Added Macroable trait to the Illuminate\Events\Dispatcher (#​31317)
  • Added NoPendingMigrations event (#​31289, 739fcea)
Fixed
  • Used current DB to create Doctrine Connections (#​31278)
  • Removed duplicate output when publishing tags in vendor:publish command (#​31333)
  • Fixed plucking column name containing a space (#​31299)
  • Fixed bug with wildcard caching in event dispatcher (#​31313)
  • Fixed infinite value for RedisStore (#​31348)
  • Fixed dropping columns in SQLServer with default value (#​31341)
Changed
  • Use SKIP LOCKED for mysql 8.1 and pgsql 9.5 queue workers (#​31287)
  • Dont merge middleware from method and property in Illuminate\Bus\Queueable::middleware() (#​31301)
  • Split specifyParameter() from Illuminate\Console\Command to HasParameters trait (#​31254)
  • Make sure changing a database field to json does not include charset (#​31343)

v6.13.1

Compare Source

Fixed
  • Fixed error on queue:work database on Windows (#​31277)

v6.13.0

Compare Source

Added
  • Added --api option to the make:model command (#​31197, #​31222)
  • Added PendingResourceRegistration::shallow() method (#​31208, 104c539)
  • Allowed formatting an implicit attribute using a closure (#​31246)
  • Added Filesystem::ensureDirectoryExists() method (8a8eed4)
  • Added support to Storage::url() for the Ftp driver (#​31258, b8790e5)
Fixed
  • Fixed laravel migrations when migrating to sql server (dropColumn with default value) (#​31229)
  • Fixed handleBeginTransactionException() method calling pdo property instead of getPdo() method (#​31233)
  • Fixed channel names when broadcasting via redis (#​31261)
  • Replace asterisks before validation (#​31257)
Changed
  • Reset timeout handler after worker loop (#​31198)

v6.12.0

Compare Source

Added
  • Added ServiceProvider::loadFactoriesFrom() method (#​31133)
  • Added TestResponse::dumpSession() method (#​31131)
  • Added Str::isUuid() method (#​31148)
  • Restored phpunit 7 support (#​31113)
  • Added Request::boolean() method (#​31160)
  • Added Database\Eloquent\FactoryBuilder::createMany() (#​31171, 6553d59)
  • Added missing options for PhpRedis (#​31182)
Fixed
  • Fixed Cache\RedisLock::acquire() (#​31168, 8683a3d)
  • Fixed database url parsing for connections with no database specified (#​31185)
  • Prevent ambiguous column with table name prefix (#​31174)
Optimization
  • Fixed memory usage on downloading large files (#​31163)
Changed

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Apr 18, 2024
Copy link
Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update laravel/framework:6.20.42 --with-dependencies --ignore-platform-reqs --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Package "laravel/framework:6.20.42" listed for update is not installed. Ignoring.
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants