Skip to content

chore: declare Laravel 13 compatibility#41

Merged
github-actions[bot] merged 1 commit into
masterfrom
chore/laravel-13-ready
May 19, 2026
Merged

chore: declare Laravel 13 compatibility#41
github-actions[bot] merged 1 commit into
masterfrom
chore/laravel-13-ready

Conversation

@jordanpartridge
Copy link
Copy Markdown
Contributor

Summary

  • Bumps PHP floor to 8.3 (Laravel 13 minimum)
  • Widens `illuminate/support` dev-constraint to admit Laravel 13.x
  • Pins `conduit-ui/connector` to `^1.0.1` — required to clear the three Saloon 3.x CVEs that block `composer audit` on Laravel 13 installs (CVE-2026-33942, CVE-2026-33183, CVE-2026-33182, all fixed in connector v1.0.1's Saloon 4 upgrade)

Why no source changes

The package's runtime code only touches stable Illuminate surface — `ServiceProvider`, `Collection`, `Facade`. None of these changed shape between L12 and L13. Verified by running the test suite against `illuminate/support v13.11.1`.

Verification

Check Result
`./vendor/bin/pest` against L13 310 passed (652 assertions)
`./vendor/bin/pest` against L12 baseline 310 passed (same)
`composer audit` No advisories
`./vendor/bin/phpstan analyse` 16 errors — all pre-existing on master baseline, 0 new

Test plan

  • Verify Pest passes on Laravel 13
  • Verify Pest still passes on Laravel 12 baseline (constraint widening, not migration)
  • Verify composer audit is clean
  • Verify PHPStan baseline unchanged

Bumps the PHP floor to 8.3 (Laravel 13 minimum) and widens the
illuminate/support dev-dependency constraint to admit Laravel 13.x.
Also pins conduit-ui/connector to ^1.0.1, which carries the Saloon 4
security upgrade — without that, composer audit blocks installs into
Laravel 13 starter kits due to three Saloon 3.x CVEs.

The package's runtime code only touches stable Illuminate surface
(ServiceProvider, Collection, Facade) so no source changes are needed.

Verified:
- 310/310 tests pass against illuminate/support v13.11.1
- composer audit clean
- PHPStan baseline unchanged (16 pre-existing errors, 0 new)
Copy link
Copy Markdown

@lexi-chief-of-staff lexi-chief-of-staff Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ship it.

  • composer.json constraint updates align exactly with the stated Laravel 13 compatibility goal and the CVE fixes in connector ^1.0.1.
  • No source changes required; runtime surface (ServiceProvider, Collection, Facade) remains stable between L12/L13 per the verification matrix.
  • PHP 8.3 floor, widened illuminate/support dev dep, and pinned connector all pass the provided checks (Pest on both branches, clean audit, unchanged PHPStan baseline).
  • Diff scope is minimal and safe.

@github-actions github-actions Bot merged commit b2a1bbf into master May 19, 2026
1 check passed
@github-actions github-actions Bot deleted the chore/laravel-13-ready branch May 19, 2026 21:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant