Release v0.6.0
This is a security and maintenance release that resolves all outstanding vulnerabilities, upgrades the core framework to the bleeding edge (Laravel 13), and brings all ecosystem and testing dependencies up to their latest major versions.
Security & Vulnerability Patches
• Patched Laravel Core Vulnerabilities: Upgraded the framework to resolve critical vulnerabilities including the CRLF injection in default email rule and Temporary Signed URL Path Confusion.
• JS Blanket Update: Upgraded frontend dependencies to patch known vulnerabilities in axios, form-data, postcss, nanoid, vite, and laravel-vite-plugin.
• PHP Blanket Update: Upgraded core backend dependencies including guzzlehttp/guzzle, league/commonmark, symfony/http-foundation, and symfony/routing.
Framework & Ecosystem Upgrades
• Upgraded to Laravel 13: Successfully jumped two major versions to completely align the app with the absolute latest 13.x framework features and security baseline.
• Upgraded PHPUnit: Bumped the testing suite from PHPUnit 11 to PHPUnit 12.
• Cleaned up Abandoned Packages: Automatically removed legacy abandoned development packages (sebastian/code-unit and sebastian/code-unit-reverse-lookup) via the PHPUnit upgrade.
What's Changed
- Updated PHP and JS dependencies by @tchubaba in #29
- Upgraded the Laravel framework, related packages and phpunit to lates… by @tchubaba in #30
Full Changelog: v0.5.6...v0.6.0
