Skip to content

v3.0.0-alpha.3

Choose a tag to compare

View all tags
@ajitbohra ajitbohra released this 02 Sep 06:26
· 4 commits to 3.x since this release
v3.0.0-alpha.3
8aafa3f

🔒 Security

  • API Authorization: Enforced role-based access control (RBAC) guards on all AnalyticsController and SettingsController endpoints to prevent Broken Access Control vulnerabilities (OWASP API3:2023).
  • Dependencies: Updated multiple composer dependencies to address security advisories, including bumping dompdf/dompdf, filament/filament, guzzlehttp/guzzle, and league/commonmark to their latest secure patch versions.

✨ Features

  • API Permissions: Added new granular API permissions to the database for analytics and settings endpoints to properly enforce RBAC.

🐛 Bug Fixes

  • Dashboard Crashes (PHP 8.4): Patched the Filament loading-section.blade.php view to prevent a TypeError (trimming an array) when lazy-loading dashboard widgets under PHP 8.4's stricter type enforcement.
  • Test Suite: Fixed failing API feature tests (AnalyticsApiTest and SettingsApiTest) by initializing and assigning the newly required permissions to the test users.

Full Changelog: v3.0.0-alpha.2...v3.0.0-alpha.3

Assets 2
Loading