Skip to content

Update petebishwhip/laradocs requirement from ^0.1.4 to ^1.1.1 - #1

Merged
oneleggedswede merged 1 commit into
mainfrom
dependabot/composer/petebishwhip/laradocs-tw-1.1.1
Sep 6, 2026
Merged

Update petebishwhip/laradocs requirement from ^0.1.4 to ^1.1.1#1
oneleggedswede merged 1 commit into
mainfrom
dependabot/composer/petebishwhip/laradocs-tw-1.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown

Updates the requirements on petebishwhip/laradocs to permit the latest version.

Release notes

Sourced from petebishwhip/laradocs's releases.

v1.1.1

What's Changed

Full Changelog: PeteBishwhip/laradocs@v1.1.0...v1.1.1

Changelog

Sourced from petebishwhip/laradocs's changelog.

[1.1.1] - 2026-09-01

Added

  • Links between documents now resolve to the routes that serve them. A cross-reference written the markdown way — [Usage](https://github.com/PeteBishwhip/laradocs/blob/main/usage.md), [Intro](https://github.com/PeteBishwhip/laradocs/blob/guide/intro.md) — used to render as a link to a file the docs routes never serve, and 404. Each one is now pointed at the target's slug. The path resolves against the page it was written on, so links on a section index resolve against the file rather than the URL. Absolute URLs, mailto: addresses, root-relative paths, bare fragments and paths that climb out of the docs directory are left exactly as authored.

Security

  • A :::version-since / :::version-until / :::version-only block's spec is now HTML-escaped before it lands in the rendered data-version-* attribute. The spec was captured by a pattern that admits a double quote, so :::version-since[1.0" onmouseover="…] could close the attribute early and add an event handler of its own.
  • Url::safe() now strips the control characters browsers ignore (tab, LF, CR anywhere in the value; the remaining C0 controls and DEL from its ends) before checking the scheme, closing an XSS bypass where jav<TAB>ascript: or a leading control character slipped past the scheme check as "relative" and was reassembled into a working javascript: URL by the browser.

[1.1.0] - 2026-08-26

Added

  • Media sources: markdown images, video and downloads can now live beside the markdown that references them, instead of already being public. media.source (LARADOCS_MEDIA_SOURCE) picks how a source is resolved — public (left exactly as authored, the default), relative (beside the markdown, inside docs.path) or disk (a named Laravel filesystem disk via media.disk) — and anything but public registers <prefix>/_media/<path> and rewrites sources to it. A relative source is resolved against the page that wrote it, and a path that names a file which isn't there is left untouched. Restricted to media.types (image/video/audio/PDF by default), checked against both the extension and the file's actual content, with optional signed, expiring URLs via media.signed and media.ttl. See the new "Media" guide.
  • Document visibility: bind a DocumentVisibility rule and laradocs asks it which documents the current reader may see. The rule wraps the document loader, so it covers everywhere a document can be reached — the navigation tree, pager and command palette, search and the search index, sitemap.xml, the feeds, llms.txt/llms-full.txt, the tag pages and the MCP tools, and a direct hit on the page's URL, which now 404s rather than rendering. Nothing is bound by default, so a site that doesn't need it pays nothing. See the new "Visibility" guide.
  • Split the Laravel Boost AI guidelines into a dedicated laradocs-development skill that points at the docs shipped inside the installed package instead of duplicating their content inline, so guidance stays in sync with the

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [petebishwhip/laradocs](https://github.com/petebishwhip/laradocs) to permit the latest version.
- [Release notes](https://github.com/petebishwhip/laradocs/releases)
- [Changelog](https://github.com/PeteBishwhip/laradocs/blob/main/CHANGELOG.md)
- [Commits](PeteBishwhip/laradocs@v0.1.4...v1.1.1)

---
updated-dependencies:
- dependency-name: petebishwhip/laradocs
  dependency-version: 1.1.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@oneleggedswede
oneleggedswede merged commit 0776619 into main Sep 6, 2026
0 of 24 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/petebishwhip/laradocs-tw-1.1.1 branch September 6, 2026 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant