Skip to content

v5.3.0

Choose a tag to compare

@eaguad1337 eaguad1337 released this 07 Jun 13:52
· 22 commits to 5.0 since this release

What's New

Redis queue driver

A new redis queue driver with the same surface as the other drivers (push, consume, retry, failed-jobs table, queue:work / queue:retry). Delayed jobs are stored in a sorted set and promoted when due, poison messages are discarded without killing the worker, and configuration ships in the skeleton (REDIS_HOST/REDIS_PORT/REDIS_PASSWORD). Thanks @ReS4 for the original implementation (#2).

Queue.push() now forwards options to drivers, so queue.push(job, delay="10 minutes") works through the public API for every driver.

Vite + Tailwind CSS 4

New projects build their assets with Vite 8 and Tailwind CSS 4, replacing the legacy laravel-mix webpack pipeline — npm audit on a fresh project goes from 12 findings to zero. All four frontend presets (tailwind, vue, react, bootstrap) were ported. Existing Mix projects keep working and the mix() helper remains available. (docs)

Security — pip-audit clean

This release clears every known vulnerability across the dependency tree:

  • cleo 2.1 (craft CLI migrated; fixes exposure to CVE-2022-42966). Custom commands keep the same docstring signature format — no changes needed.
  • cryptography >= 46.0.7 (CVE-2026-26007, CVE-2026-34073, CVE-2026-39892)
  • pytest is no longer a production dependency (moved to the test extra, now pytest 9)
  • skeleton axios ^1.17 (20+ advisories in the 0.x line)
  • strong(breach=True) validation now calls the Have I Been Pwned k-anonymity API directly — no extra package needed
  • Unmaintained hashids, hfilesize and pwnedapi removed

Upgrade notes

  • Requires masonite-framework-orm >= 3.1 (its CLI also moved to cleo 2)
  • hashid feature now uses Sqids: generated hashes differ from previous versions. Hashed IDs are ephemeral by design (encoded in a response, decoded on the next request); only values persisted across the upgrade are affected. (docs)
  • The Vonage notification driver now requires the v4 SDK (pip install "vonage>=4"); the to_vonage notification API is unchanged
  • masonite.tests.TestCase now requires pytest explicitly: pip install masonite-framework[test]

Full Changelog: v5.2.0...v5.3.0