Skip to content

Releases: ef-next/laravel-security-framework

Release list

v1.0.0-beta.2

v1.0.0-beta.2 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 28 Oct 20:19

First public release, on Laravel 13. Apart from the move to Laravel 13, the
code is that of 1.0.0-beta.1, which was not published; the rest of this
release prepares the repository for publication.

  • Laravel 13 only. The illuminate/* constraints are ^13.0 (Laravel 12
    is no longer installable), symfony/http-kernel is ^7.4 || ^8.0 like
    Laravel 13's own. The test tooling moved to Pest 4 / PHPUnit 12,
    pest-plugin-laravel 4 and Testbench 11. PHP 8.3, 8.4 and 8.5 are hard CI
    gates on Laravel 13; the experimental CI matrix is gone, so every supported
    combination is a gate and nothing else runs. The example application and
    bin/boost-check build on the Laravel 13 skeleton; the example's
    bootstrap/app.php follows it (JSON error responses for api/*).

  • The repository is now github.com/ef-next/laravel-security-framework, with a
    fresh history.

  • Contact addresses are info@ef-next.com (support, code of conduct) and
    security@ef-next.com (vulnerability reports).

  • Documentation, code comments and tests use the neutral service name
    example-service in global object id examples.

  • The migration notes for ef.next's internal predecessor packages are no
    longer part of the repository.

  • Laravel Boost support: the package ships an AI guideline
    (resources/boost/guidelines/core.blade.php) and the skill
    efnext-security-integration; php artisan boost:install loads them into
    the coding agent's context of an application that uses the framework.
    bin/boost-check (./start-security-framework.sh boost) installs Boost in a
    fresh application and checks that both arrive.

  • README: new sections "AI coding agents" and "How this was built", the latter
    stating that the framework was written by an AI coding agent under the
    maintainer's direction, and what evidence backs it.


Assets: source archive, SHA256SUMS, SBOM (SPDX + CycloneDX), build provenance attestation.
Verify: gh attestation verify security-framework-v1.0.0-beta.2.tar.gz --repo ef-next/laravel-security-framework and sha256sum -c SHA256SUMS.