Bumps laravel/framework from 5.6.6 to 5.6.23. This update includes security fixes.
Vulnerabilities fixed
*Sourced from [The PHP Security Advisories Database](https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml).*
> **Exploit of encryption failure vulnerability**
>
> Affected versions: >=4.0.0, <=4.0.11; >=4.1.0, <=4.1.31; >=4.2.0, <=4.2.22; >=5.0.0, <=5.0.35; >=5.1.0, <=5.1.46; >=5.2.0, <=5.2.45; >=5.3.0, <=5.3.31; >=5.4.0, <=5.4.36; >=5.5.0, <5.5.40; >=5.6.0, <5.6.15
Release notes
*Sourced from [laravel/framework's releases](https://github.com/laravel/framework/releases).*
> ## v5.6.23
> ### Added
> - Added support for renaming indices ([#24147](https://github-redirect.dependabot.com/laravel/framework/pull/24147))
> - Added `Event::fakeFor()` method ([#24230](https://github-redirect.dependabot.com/laravel/framework/pull/24230))
> - Added `[**canany**](https://github.com/canany)` Blade directive ([#24137](https://github-redirect.dependabot.com/laravel/framework/pull/24137))
> - Added `TestReponse:: assertLocation()` method ([#24267](https://github-redirect.dependabot.com/laravel/framework/pull/24267))
>
> ### Changed
> - Validation bypass for `before` and `after` rules when paired with `date_format` rule ([#24191](https://github-redirect.dependabot.com/laravel/framework/pull/24191))
>
> ### Fixed
> - Fixed an issue with `Cache::increment()` when expiration is `null` ([#24228](https://github-redirect.dependabot.com/laravel/framework/pull/24228))
> - Ignore non-where bindings in nested where constraints ([#24000](https://github-redirect.dependabot.com/laravel/framework/pull/24000))
> - Fixed `withCount()` binding problems ([#24240](https://github-redirect.dependabot.com/laravel/framework/pull/24240))
>
> ## v5.6.22
> ### Added
> - Added `Collection::loadMissing()` method ([#24166](https://github-redirect.dependabot.com/laravel/framework/pull/24166), [#24215](https://github-redirect.dependabot.com/laravel/framework/pull/24215))
>
> ### Changed
> - Support updating NPM dependencies from preset ([#24189](https://github-redirect.dependabot.com/laravel/framework/pull/24189), [a6542b0](https://github.com/laravel/framework/commit/a6542b0972a1a92c1249689d3e1b46b3bc4e59fa))
> - Support returning `Responsable` from middleware ([#24201](https://github-redirect.dependabot.com/laravel/framework/pull/24201))
>
> ## v5.6.21
> ### Added
> - Added `FilesystemManager::forgetDisk()` method ([#24057](https://github-redirect.dependabot.com/laravel/framework/pull/24057), [cbfb4fb](https://github.com/laravel/framework/commit/cbfb4fbf0784ac5eb08ce2effe8727f3428d5812))
> - Added `--allow` parameter to `down` command ([#24003](https://github-redirect.dependabot.com/laravel/framework/pull/24003))
> - Added more comparison validation rules (`gt`, `lt`, `gte`, `lte`) ([#24091](https://github-redirect.dependabot.com/laravel/framework/pull/24091), [#24135](https://github-redirect.dependabot.com/laravel/framework/pull/24135))
> - Added `TestResponse::assertCookieNotExpired()` method ([#24119](https://github-redirect.dependabot.com/laravel/framework/pull/24119))
>
> ### Changed
> - Redis connections now implement the `Contracts/Redis/Connection` interface ([#24142](https://github-redirect.dependabot.com/laravel/framework/pull/24142))
>
> ### Fixed
> - Fixed unsetting request parameters during `HEAD` requests ([#24092](https://github-redirect.dependabot.com/laravel/framework/pull/24092))
> - Fixed `HasManyThrough` returning incorrect results with `chunk()` ([#24096](https://github-redirect.dependabot.com/laravel/framework/pull/24096), [5d3d98a](https://github.com/laravel/framework/commit/5d3d98a8c620458b9c1f80fbcefa1d88f9490784))
> - Fixed `dateBasedWhere()` with raw expressions when using SQLite ([#24102](https://github-redirect.dependabot.com/laravel/framework/pull/24102))
> - Fixed `whereYear()` not accepting integers when using SQLite ([#24115](https://github-redirect.dependabot.com/laravel/framework/pull/24115))
> - Remove full base URL from generated paths ([#24101](https://github-redirect.dependabot.com/laravel/framework/pull/24101))
>
> ## v5.6.20
> ### Added
> - Support passing `Response` and `Responsable` to `abort()` ([4e29889](https://github.com/laravel/framework/commit/4e298893c746734de7049cc69483ce252f6d93c8))
> - Added `pingBeforeIf` and `thenPingIf` methods to task scheduler ([#24077](https://github-redirect.dependabot.com/laravel/framework/pull/24077), [1bf54d2](https://github.com/laravel/framework/commit/1bf54d23b5d2207d7c60a549584c774f9ff8386b))
> - Added `withDefault()` support to `MorphTo` relationships ([#24061](https://github-redirect.dependabot.com/laravel/framework/pull/24061))
>
> ### Fixed
> - Fixed URL generator when request has base path ([#24074](https://github-redirect.dependabot.com/laravel/framework/pull/24074))
>
> ## v5.6.19
> ... (truncated)
Commits
- [`f547f0a`](https://github.com/laravel/framework/commit/f547f0a71a12763d1adb8493237d541c9e3a5d10) version
- [`6ef48a8`](https://github.com/laravel/framework/commit/6ef48a89c07f086ae9c96be36da375e296137c8a) Merge branch '5.5' into 5.6
- [`9b10dcb`](https://github.com/laravel/framework/commit/9b10dcb31f1cc81322f9ec193aea0a8ba9e6db88) Fixed typo
- [`39165dd`](https://github.com/laravel/framework/commit/39165ddea22cf837a34a8b01e4974cebb5c1af6d) formatting
- [`0a1460a`](https://github.com/laravel/framework/commit/0a1460afd7eefdf130461b6daf9f23eca2b857e7) Merge branch 'rename-index' of https://github.com/slava-vishnyakov/framework ...
- [`6ceca14`](https://github.com/laravel/framework/commit/6ceca14d25783733cd3755996df86de1019ca91e) formatting and method rename
- [`6911659`](https://github.com/laravel/framework/commit/6911659c866a86aea711714b57a017ae672ac34b) Merge branch '5.6' of https://github.com/gsingh1/framework into gsingh1-5.6
- [`f1f2276`](https://github.com/laravel/framework/commit/f1f227647e3f325902eb08623c33315f0daa0d13) [5.5] Validation bypass for 'before' and 'after' rules when paired with 'date...
- [`89b2f7b`](https://github.com/laravel/framework/commit/89b2f7b5c94931096eb75f92704802e55bb94179) Merge branch 'jonnsl-validation-bypass' into 5.6
- [`378ca9d`](https://github.com/laravel/framework/commit/378ca9de1684d9d3daeb5cc73f9ad79d67e7e785) formatting standard
- Additional commits viewable in [compare view](https://github.com/laravel/framework/compare/v5.6.6...v5.6.23)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
If all status checks pass Dependabot will automatically merge this pull request.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use (this|these) label[s]` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use (this|these) reviewer[s]` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use (this|these) assignee[s]` will set the current assignees as the default for future PRs for this repo and language
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
Bumps laravel/framework from 5.6.6 to 5.6.23. This update includes security fixes.
Vulnerabilities fixed
*Sourced from [The PHP Security Advisories Database](https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml).* > **Exploit of encryption failure vulnerability** > > Affected versions: >=4.0.0, <=4.0.11; >=4.1.0, <=4.1.31; >=4.2.0, <=4.2.22; >=5.0.0, <=5.0.35; >=5.1.0, <=5.1.46; >=5.2.0, <=5.2.45; >=5.3.0, <=5.3.31; >=5.4.0, <=5.4.36; >=5.5.0, <5.5.40; >=5.6.0, <5.6.15Release notes
*Sourced from [laravel/framework's releases](https://github.com/laravel/framework/releases).* > ## v5.6.23 > ### Added > - Added support for renaming indices ([#24147](https://github-redirect.dependabot.com/laravel/framework/pull/24147)) > - Added `Event::fakeFor()` method ([#24230](https://github-redirect.dependabot.com/laravel/framework/pull/24230)) > - Added `[**canany**](https://github.com/canany)` Blade directive ([#24137](https://github-redirect.dependabot.com/laravel/framework/pull/24137)) > - Added `TestReponse:: assertLocation()` method ([#24267](https://github-redirect.dependabot.com/laravel/framework/pull/24267)) > > ### Changed > - Validation bypass for `before` and `after` rules when paired with `date_format` rule ([#24191](https://github-redirect.dependabot.com/laravel/framework/pull/24191)) > > ### Fixed > - Fixed an issue with `Cache::increment()` when expiration is `null` ([#24228](https://github-redirect.dependabot.com/laravel/framework/pull/24228)) > - Ignore non-where bindings in nested where constraints ([#24000](https://github-redirect.dependabot.com/laravel/framework/pull/24000)) > - Fixed `withCount()` binding problems ([#24240](https://github-redirect.dependabot.com/laravel/framework/pull/24240)) > > ## v5.6.22 > ### Added > - Added `Collection::loadMissing()` method ([#24166](https://github-redirect.dependabot.com/laravel/framework/pull/24166), [#24215](https://github-redirect.dependabot.com/laravel/framework/pull/24215)) > > ### Changed > - Support updating NPM dependencies from preset ([#24189](https://github-redirect.dependabot.com/laravel/framework/pull/24189), [a6542b0](https://github.com/laravel/framework/commit/a6542b0972a1a92c1249689d3e1b46b3bc4e59fa)) > - Support returning `Responsable` from middleware ([#24201](https://github-redirect.dependabot.com/laravel/framework/pull/24201)) > > ## v5.6.21 > ### Added > - Added `FilesystemManager::forgetDisk()` method ([#24057](https://github-redirect.dependabot.com/laravel/framework/pull/24057), [cbfb4fb](https://github.com/laravel/framework/commit/cbfb4fbf0784ac5eb08ce2effe8727f3428d5812)) > - Added `--allow` parameter to `down` command ([#24003](https://github-redirect.dependabot.com/laravel/framework/pull/24003)) > - Added more comparison validation rules (`gt`, `lt`, `gte`, `lte`) ([#24091](https://github-redirect.dependabot.com/laravel/framework/pull/24091), [#24135](https://github-redirect.dependabot.com/laravel/framework/pull/24135)) > - Added `TestResponse::assertCookieNotExpired()` method ([#24119](https://github-redirect.dependabot.com/laravel/framework/pull/24119)) > > ### Changed > - Redis connections now implement the `Contracts/Redis/Connection` interface ([#24142](https://github-redirect.dependabot.com/laravel/framework/pull/24142)) > > ### Fixed > - Fixed unsetting request parameters during `HEAD` requests ([#24092](https://github-redirect.dependabot.com/laravel/framework/pull/24092)) > - Fixed `HasManyThrough` returning incorrect results with `chunk()` ([#24096](https://github-redirect.dependabot.com/laravel/framework/pull/24096), [5d3d98a](https://github.com/laravel/framework/commit/5d3d98a8c620458b9c1f80fbcefa1d88f9490784)) > - Fixed `dateBasedWhere()` with raw expressions when using SQLite ([#24102](https://github-redirect.dependabot.com/laravel/framework/pull/24102)) > - Fixed `whereYear()` not accepting integers when using SQLite ([#24115](https://github-redirect.dependabot.com/laravel/framework/pull/24115)) > - Remove full base URL from generated paths ([#24101](https://github-redirect.dependabot.com/laravel/framework/pull/24101)) > > ## v5.6.20 > ### Added > - Support passing `Response` and `Responsable` to `abort()` ([4e29889](https://github.com/laravel/framework/commit/4e298893c746734de7049cc69483ce252f6d93c8)) > - Added `pingBeforeIf` and `thenPingIf` methods to task scheduler ([#24077](https://github-redirect.dependabot.com/laravel/framework/pull/24077), [1bf54d2](https://github.com/laravel/framework/commit/1bf54d23b5d2207d7c60a549584c774f9ff8386b)) > - Added `withDefault()` support to `MorphTo` relationships ([#24061](https://github-redirect.dependabot.com/laravel/framework/pull/24061)) > > ### Fixed > - Fixed URL generator when request has base path ([#24074](https://github-redirect.dependabot.com/laravel/framework/pull/24074)) > > ## v5.6.19 > ... (truncated)Commits
- [`f547f0a`](https://github.com/laravel/framework/commit/f547f0a71a12763d1adb8493237d541c9e3a5d10) version - [`6ef48a8`](https://github.com/laravel/framework/commit/6ef48a89c07f086ae9c96be36da375e296137c8a) Merge branch '5.5' into 5.6 - [`9b10dcb`](https://github.com/laravel/framework/commit/9b10dcb31f1cc81322f9ec193aea0a8ba9e6db88) Fixed typo - [`39165dd`](https://github.com/laravel/framework/commit/39165ddea22cf837a34a8b01e4974cebb5c1af6d) formatting - [`0a1460a`](https://github.com/laravel/framework/commit/0a1460afd7eefdf130461b6daf9f23eca2b857e7) Merge branch 'rename-index' of https://github.com/slava-vishnyakov/framework ... - [`6ceca14`](https://github.com/laravel/framework/commit/6ceca14d25783733cd3755996df86de1019ca91e) formatting and method rename - [`6911659`](https://github.com/laravel/framework/commit/6911659c866a86aea711714b57a017ae672ac34b) Merge branch '5.6' of https://github.com/gsingh1/framework into gsingh1-5.6 - [`f1f2276`](https://github.com/laravel/framework/commit/f1f227647e3f325902eb08623c33315f0daa0d13) [5.5] Validation bypass for 'before' and 'after' rules when paired with 'date... - [`89b2f7b`](https://github.com/laravel/framework/commit/89b2f7b5c94931096eb75f92704802e55bb94179) Merge branch 'jonnsl-validation-bypass' into 5.6 - [`378ca9d`](https://github.com/laravel/framework/commit/378ca9de1684d9d3daeb5cc73f9ad79d67e7e785) formatting standard - Additional commits viewable in [compare view](https://github.com/laravel/framework/compare/v5.6.6...v5.6.23)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.If all status checks pass Dependabot will automatically merge this pull request.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use (this|these) label[s]` will set the current labels as the default for future PRs for this repo and language - `@dependabot use (this|these) reviewer[s]` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use (this|these) assignee[s]` will set the current assignees as the default for future PRs for this repo and language Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.