4 Commits

Author	SHA1	Message	Date
KodeStar	8a622545ff	Upgrade to Laravel 13 ... - laravel/framework ^12.0 -> ^13.0 (installed 13.19.0) - laravel/tinker ^2.9 -> ^3.0 (installed 3.0.2, pulls psysh >=0.12.19) - phpunit/phpunit ^11.0 -> ^12.0 (installed 12.5.31) - Symfony components move to 8.x (supported by L13); symfony/yaml stays on patched 7.4.14 via its direct ^7.0 constraint - league/commonmark auto-bumped to 2.8.2 (patched) - No application/config code changes required; the fluent validateCsrfTokens(except: ...) config still resolves under L13 composer audit: No security vulnerability advisories found. Full suite green: 59 tests, 128 assertions (1 skipped).	2026-07-08 19:57:08 +01:00
KodeStar	f69cbba6cd	Update dependencies flagged by security advisories and require PHP 8.4 ... Bumps the packages reported by CVE/GHSA scans in #1564 to their patched releases (with transitive dependencies): - symfony/http-foundation 7.3.1 -> 7.4.14 (CVE-2025-64500 / GHSA-3rg7-wf37-54rm) - phpunit/phpunit 10.5.47 -> 10.5.64 (CVE-2026-24765 / GHSA-vvj3-c3rp-c85p) - aws/aws-sdk-php 3.349.3 -> 3.388.0 (GHSA-27qh-8cxx-2cr5) - enshrined/svg-sanitize 0.21.0 -> 0.22.0 (GHSA-22wq-q86m-83fh) Some transitive dependencies now require PHP 8.4, which matches the runtime shipped in the official LinuxServer image, so the composer requirement is raised to ^8.4, CI is pinned to PHP 8.4, and the readme is updated to match. The remaining advisories in the report (php84, curl, libpq, git, sqlite, busybox, coreutils) come from the LinuxServer base image, not this repository, and are addressed by rebuilding the image on an updated base. Refs #1564	2026-07-08 16:30:22 +01:00
Chris Hunt	8fb6438254	Updates to vendors etc	2025-07-11 15:57:48 +01:00
Chris Hunt	d52ae0d3c3	Update dependencies	2024-02-16 21:36:54 +00:00