Filament Release Notes
96 release notes curated from 1 source by the Releasebot Team. Last updated: Jul 18, 2026
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
v5.7.1
Filament fixes Field wrapper Blade component aliases in a small release update.
What's Changed
fix: Field wrapper Blade component aliases by @danharrin in #20206
Full Changelog: v5.7.0...v5.7.1
Original source - Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
v5.7.0
Filament releases v5.7 with new chart widget, export, modal, table, sidebar, and navigation improvements, plus performance boosts, accessibility fixes, and broader security hardening across forms, uploads, query builder, and translations.
New Features
feat: add chart widget empty state by @ahmed-rashad-alnaggar in #19579
Update maxContentWidth to support Closure type by @ibnnajjaar in #19773
Allow modal close button (or other dismissive actions) to cancel parent actions by @CamKemBell in #19781
modal click through allowed by @tanthammar in #19783
Refocus autofocus field after Create & create another by @intrepidws in #19825
feature: Add configure xlsx writer after open by @ombimo in #19834
feat(panels): support grouped user menu items with separate dropdown … by @tomjamon in #19863
Add Closure support to sidebarWidth() and collapsedSidebarWidth() by @ashraful19 in #20009
feat: ExportColumn visibility by @billmn in #20004
Add Closure support to darkMode() and add darkModeToggle() by @ashraful19 in #20008
feat(tables): allow columns to override search term splitting for individual searches by @ropi-bc in #20105
feat: allow navigation parent items to be referenced by navigation item key by @ahmed-rashad-alnaggar in #20107
Feature: hide actions column when no actions are available for any row by @webard in #20133
feat: Add opt-in CSV formula injection protection to exports by @danharrin in #20161What's Changed
Optimize large form rendering by @danharrin in #19550
Optimize table rendering by @danharrin in #19551
fix: Skip cell attribute caching when hiddenFrom or visibleFrom use a Closure by @people-sea in #20080
fix: SPA navigation missing on optimized action links by @people-sea in #20099
fix: restore scroll position when navigating back in SPA mode by @people-sea in #20106
fix(translation): further improve Arabic translations, pluralization, and spelling by @hamdyelbatal122 in #20104
Fix Czech typo: aktulizace -> aktualizace by @erikpach in #20108
Fix Hebrew translation typo for 'mark all as read' label by @zvizvi in #20116
chore(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #20109
chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #20110
chore(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #20113
chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #20114
fix: Prevent in-flight uploads from being wiped when parallel uploads complete by @Bramvzw in #20121
Chore: missing pl translations by @webard in #20131
fix: Custom table layout row divider color by @danharrin in #20132
fix: Markdown editor state sync when focused by @danharrin in #20134
fix: Non-UTF8 column data docs & command notice by @danharrin in #20135
fix: Notification vertical animation by @danharrin in #20136
Fix: nested slideOver position by @webard in #20137
fix: Basic a11y issues by @danharrin in #20138
fix: Notification assertions with multiple notifications by @danharrin in #20141
fix: Associate another closure check by @danharrin in #20142
fix: Install command composer.json parse failure by @danharrin in #20143
fix: Individual column search without splitting where grouping by @danharrin in #20144
fix: Do not mutate original component of clone by @danharrin in #20145
fix: JSON encode entry array state by @danharrin in #20146
fix: Do not commit DB transaction twice when cancelling action by @danharrin in #20147
security: Prevent delete file path tampering by @danharrin in #20148
security: Table select modify query docs note by @danharrin in #20149
security: Guard query builder month and year operator settings by @danharrin in #20151
fix: add missing space before @deprecated PHPDoc tags by @oraby99 in #20154
docs: Note basic chart widget filter is user-controllable by @danharrin in #20155
test: Add enforcement tests for unauthorized action invocation by @danharrin in #20159
test: Add regression tests for export and import download authorization by @danharrin in #20160
test: Add regression tests for per-record bulk action authorization by @danharrin in #20162
security: Escape identity values in schema attribute bags by @danharrin in #20164
security: Sanitize color CSS value in entries and columns by @danharrin in #20158
security: Guard query builder text operator settings by @danharrin in #20157
security: Bound query builder rule count and nesting depth by @danharrin in #20156
docs: Update resource navigation parent items docs by @ahmed-rashad-alnaggar in #20163
fix: Merging navigation item child items duplication by @ahmed-rashad-alnaggar in #20166
Fix broken link in container queries documentation by @andreia in #20167
fix: respect time in absolute date constraints by @people-sea in #20171
Update Spanish translations by @luisprmat in #20174
fix: Evaluate stat value by @ahmed-rashad-alnaggar in #20175
Update finnish translation by @Zagna in #20177
Use Str::counted() in generated exporter notification body on Laravel 13.19+ by @lloricode in #20170
fix: Qualify column names for joins on MorphToSelect / Repeater by @danharrin in #20182
fix: use dehydrated settings for query builder constraints by @people-sea in #20180
fix: More a11y issues by @danharrin in #20168
Chore: missing pl translations by @webard in #20183
Update finnish translation by @Zagna in #20185
fix: Actions in Livewire-state tabs by @danharrin in #20192
fix: Query builder multi-related-to operator by @danharrin in #20196
Fill missing Hebrew (he) translations by @dotanm in #20198New Contributors
@erikpach made their first contribution in #20108
@ibnnajjaar made their first contribution in #19773
@ombimo made their first contribution in #19834
@Bramvzw made their first contribution in #20121
@oraby99 made their first contribution in #20154
@dotanm made their first contribution in #20198Full Changelog: v5.6.8...v5.7.0
Original source All of your release notes in one feed
Join Releasebot and get updates from Filament and hundreds of other software products.
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
v4.12.1
Filament fixes Field wrapper Blade component aliases in a small patch release.
What's Changed
fix: Field wrapper Blade component aliases by @danharrin in #20206
Full Changelog: v4.12.0...v4.12.1
Original source - Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
v4.12.0
Filament adds chart widget empty states, modal and navigation refinements, export and query builder improvements, performance boosts, stronger security, and broader translation updates in a feature-packed release.
New Features
- feat: add chart widget empty state by @ahmed-rashad-alnaggar in #19579
- Update maxContentWidth to support Closure type by @ibnnajjaar in #19773
- Allow modal close button (or other dismissive actions) to cancel parent actions by @CamKemBell in #19781
- modal click through allowed by @tanthammar in #19783
- Refocus autofocus field after Create & create another by @intrepidws in #19825
- feature: Add configure xlsx writer after open by @ombimo in #19834
- feat(panels): support grouped user menu items with separate dropdown … by @tomjamon in #19863
- Add Closure support to sidebarWidth() and collapsedSidebarWidth() by @ashraful19 in #20009
- feat: ExportColumn visibility by @billmn in #20004
- Add Closure support to darkMode() and add darkModeToggle() by @ashraful19 in #20008
- feat(tables): allow columns to override search term splitting for individual searches by @ropi-bc in #20105
- feat: allow navigation parent items to be referenced by navigation item key by @ahmed-rashad-alnaggar in #20107
- Feature: hide actions column when no actions are available for any row by @webard in #20133
- feat: Add opt-in CSV formula injection protection to exports by @danharrin in #20161
What's Changed
- Optimize large form rendering by @danharrin in #19550
- Optimize table rendering by @danharrin in #19551
- security: Sanitize disabled RichEditor state by @danharrin in #20029
- fix(translation): improve Arabic localization (spelling, missing keys, layout) by @hamdyelbatal122 in #20024
- Backport PHPStan fixes and security hardening from 4.x by @danharrin in #20033
- chore: Add Laravel 13 support by @pranab-acharya in #20023
- chore(deps-dev): bump esbuild from 0.25.12 to 0.28.1 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20040
- chore(deps): bump esbuild from 0.25.12 to removed in /docs-assets/app in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20041
- fix: Clear cached child schemas after setting raw schema state by @people-sea in #20039
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20043
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20044
- fix: make:filament-user crashes without default panel by @ashraful19 in #20026
- Fix: distinct validation for booleans respects field required state (#19995) by @pranab-acharya in #20036
- fix: Database notification not closing on navigate by @danharrin in #20046
- chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #20053
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20066
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20068
- fix: OTC character offset by @danharrin in #20047
- fix: respect custom selectability in bulk actions when selecting all by @hamdyelbatal122 in #20051
- Fix translation for 'Select all' label in Ukrainian by @KiberGod in #20056
- fix(translation): improve Arabic translations, pluralization, and spelling by @hamdyelbatal122 in #20052
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20085
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20086
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20088
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20089
- fix: Skip cell attribute caching when hiddenFrom or visibleFrom use a Closure by @people-sea in #20080
- Fix: keep the submit button disabled while any field is still processing by @SkHCrusher in #20038
- fix: Navigation group enum respects collapsible() when collapsed by @people-sea in #20055
- Fix: Render standalone icon aliases in UI components by @kaungkhantjc in #20061
- fix(translations): translate ja email multi-factor provider strings by @kazaminosuke in #20093
- fix(translations): complete missing Japanese translations across several packages by @kazaminosuke in #20094
- fix: pre-populate tableColumnSearches to prevent JS .length collision on individual column search by @lazerg in #20071
- Change ImageColumn from 'avatar' to 'header_image' by @smiliyas in #20076
- fix: handle focus return when closing nested x-trap modals by @people-sea in #20077
- DateTimePicker: add missing Korean (ko) dayjs locale by @corean in #20090
- fix: add missing key for italian translation by @filippozanardo in #20069
- fix: SPA navigation missing on optimized action links by @people-sea in #20099
- fix(query-builder): Correct aggregate min/max keys by @parthibarath in #20100
- i18n(vi): complete missing Vietnamese translations in forms package by @thaolaptrinh in #20062
- fix(translation): further improve Arabic translations, pluralization, and spelling by @hamdyelbatal122 in #20104
- Fix Czech typo: aktulizace -> aktualizace by @erikpach in #20108
- Fix Hebrew translation typo for 'mark all as read' label by @zvizvi in #20116
- chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #20110
- chore(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #20113
- fix: Prevent in-flight uploads from being wiped when parallel uploads complete by @Bramvzw in #20121
- Chore: missing pl translations by @webard in #20131
- fix: Custom table layout row divider color by @danharrin in #20132
- fix: Markdown editor state sync when focused by @danharrin in #20134
- fix: Non-UTF8 column data docs & command notice by @danharrin in #20135
- Fix: nested slideOver position by @webard in #20137
- fix: Basic a11y issues by @danharrin in #20138
- fix: Notification assertions with multiple notifications by @danharrin in #20141
- fix: Associate another closure check by @danharrin in #20142
- fix: Install command composer.json parse failure by @danharrin in #20143
- fix: Individual column search without splitting where grouping by @danharrin in #20144
- fix: Do not mutate original component of clone by @danharrin in #20145
- fix: JSON encode entry array state by @danharrin in #20146
- fix: Do not commit DB transaction twice when cancelling action by @danharrin in #20147
- security: Prevent delete file path tampering by @danharrin in #20148
- security: Table select modify query docs note by @danharrin in #20149
- security: Guard query builder month and year operator settings by @danharrin in #20151
- fix: add missing space before @deprecated PHPDoc tags by @oraby99 in #20154
- docs: Note basic chart widget filter is user-controllable by @danharrin in #20155
- test: Add enforcement tests for unauthorized action invocation by @danharrin in #20159
- test: Add regression tests for export and import download authorization by @danharrin in #20160
- test: Add regression tests for per-record bulk action authorization by @danharrin in #20162
- security: Escape identity values in schema attribute bags by @danharrin in #20164
- security: Sanitize color CSS value in entries and columns by @danharrin in #20158
- security: Guard query builder text operator settings by @danharrin in #20157
- security: Bound query builder rule count and nesting depth by @danharrin in #20156
- docs: Update resource navigation parent items docs by @ahmed-rashad-alnaggar in #20163
- fix: Merging navigation item child items duplication by @ahmed-rashad-alnaggar in #20166
- Fix broken link in container queries documentation by @andreia in #20167
- fix: respect time in absolute date constraints by @people-sea in #20171
- Update Spanish translations by @luisprmat in #20174
- fix: Evaluate stat value by @ahmed-rashad-alnaggar in #20175
- Update finnish translation by @Zagna in #20177
- Use Str::counted() in generated exporter notification body on Laravel 13.19+ by @lloricode in #20170
- fix: Qualify column names for joins on MorphToSelect / Repeater by @danharrin in #20182
- fix: use dehydrated settings for query builder constraints by @people-sea in #20180
- fix: More a11y issues by @danharrin in #20168
- Chore: missing pl translations by @webard in #20183
- Update finnish translation by @Zagna in #20185
- fix: Actions in Livewire-state tabs by @danharrin in #20192
- fix: Query builder multi-related-to operator by @danharrin in #20196
- Fill missing Hebrew (he) translations by @dotanm in #20198
New Contributors
- @pranab-acharya made their first contribution in #20023
- @ashraful19 made their first contribution in #20026
- @KiberGod made their first contribution in #20056
- @SkHCrusher made their first contribution in #20038
- @kaungkhantjc made their first contribution in #20061
- @kazaminosuke made their first contribution in #20093
- @lazerg made their first contribution in #20071
- @filippozanardo made their first contribution in #20069
- @parthibarath made their first contribution in #20100
- @thaolaptrinh made their first contribution in #20062
- @erikpach made their first contribution in #20108
- @ibnnajjaar made their first contribution in #19773
- @ombimo made their first contribution in #19834
- @Bramvzw made their first contribution in #20121
- @oraby99 made their first contribution in #20154
- @dotanm made their first contribution in #20198
Full Changelog: v4.11.7...v4.12.0
Original source - Jul 2, 2026
- Date parsed from source:Jul 2, 2026
- First seen by Releasebot:Jul 3, 2026
v5.6.8
Filament ships v5.6.8 with localization and UI polish, including improved Arabic and Japanese translations, better bulk action and modal behavior, cleaner notifications, and several form, table, and query builder fixes.
What's Changed
- fix(translation): improve Arabic localization (spelling, missing keys, layout) by @hamdyelbatal122 in #20024
- chore(deps-dev): bump esbuild from 0.25.12 to 0.28.1 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20040
- chore(deps): bump esbuild from 0.25.12 to removed in /docs-assets/app in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20041
- fix: Clear cached child schemas after setting raw schema state by @people-sea in #20039
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20043
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20044
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20045
- fix: handle Livewire 4 request payloads in error notifications by @people-sea in #20031
- fix: make:filament-user crashes without default panel by @ashraful19 in #20026
- Fix: distinct validation for booleans respects field required state (#19995) by @pranab-acharya in #20036
- fix: Database notification not closing on navigate by @danharrin in #20046
- chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #20053
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20066
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20067
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20068
- fix: OTC character offset by @danharrin in #20047
- fix: respect custom selectability in bulk actions when selecting all by @hamdyelbatal122 in #20051
- Fix translation for 'Select all' label in Ukrainian by @KiberGod in #20056
- fix(translation): improve Arabic translations, pluralization, and spelling by @hamdyelbatal122 in #20052
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20084
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20085
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20086
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20087
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20088
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20089
- Fix: keep the submit button disabled while any field is still processing by @SkHCrusher in #20038
- fix: Navigation group enum respects collapsible() when collapsed by @people-sea in #20055
- Fix: Render standalone icon aliases in UI components by @kaungkhantjc in #20061
- fix(translations): translate ja email multi-factor provider strings by @kazaminosuke in #20093
- fix(translations): complete missing Japanese translations across several packages by @kazaminosuke in #20094
- fix: pre-populate tableColumnSearches to prevent JS .length collision on individual column search by @lazerg in #20071
- Change ImageColumn from 'avatar' to 'header_image' by @smiliyas in #20076
- fix: handle focus return when closing nested x-trap modals by @people-sea in #20077
- DateTimePicker: add missing Korean (ko) dayjs locale by @corean in #20090
- fix: add missing key for italian translation by @filippozanardo in #20069
- fix(query-builder): Correct aggregate min/max keys by @parthibarath in #20100
- i18n(vi): complete missing Vietnamese translations in forms package by @thaolaptrinh in #20062
New Contributors
- @pranab-acharya made their first contribution in #20023
- @ashraful19 made their first contribution in #20026
- @KiberGod made their first contribution in #20056
- @SkHCrusher made their first contribution in #20038
- @kaungkhantjc made their first contribution in #20061
- @kazaminosuke made their first contribution in #20093
- @lazerg made their first contribution in #20071
- @filippozanardo made their first contribution in #20069
- @parthibarath made their first contribution in #20100
- @thaolaptrinh made their first contribution in #20062
Full Changelog: v5.6.7...v5.6.8
Original source Similar to Filament with recent updates:
- xAI release notes178 release notes · Latest Jul 21, 2026
- Teamviewer release notes196 release notes · Latest Jun 23, 2026
- Anydesk release notes84 release notes · Latest Jul 22, 2026
- Laravel release notes341 release notes · Latest Jul 21, 2026
- Alpine.js release notes19 release notes · Latest Apr 30, 2026
- Smokeball release notes136 release notes · Latest Jul 16, 2026
- Jul 2, 2026
- Date parsed from source:Jul 2, 2026
- First seen by Releasebot:Jul 3, 2026
v4.11.8
Filament improves localization, form handling, and UI behavior in a release packed with bug fixes. It sharpens Arabic and Japanese translations, fixes notification and modal quirks, and improves schema, table search, bulk action, and validation behavior.
What's Changed
- fix(translation): improve Arabic localization (spelling, missing keys, layout) by @hamdyelbatal122 in #20024
- chore(deps-dev): bump esbuild from 0.25.12 to 0.28.1 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20040
- chore(deps): bump esbuild from 0.25.12 to removed in /docs-assets/app in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20041
- fix: Clear cached child schemas after setting raw schema state by @people-sea in #20039
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20043
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #20044
- fix: make:filament-user crashes without default panel by @ashraful19 in #20026
- Fix: distinct validation for booleans respects field required state (#19995) by @pranab-acharya in #20036
- fix: Database notification not closing on navigate by @danharrin in #20046
- chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #20053
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20066
- chore(deps): bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #20068
- fix: OTC character offset by @danharrin in #20047
- fix: respect custom selectability in bulk actions when selecting all by @hamdyelbatal122 in #20051
- Fix translation for 'Select all' label in Ukrainian by @KiberGod in #20056
- fix(translation): improve Arabic translations, pluralization, and spelling by @hamdyelbatal122 in #20052
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20085
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20086
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #20088
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #20089
- Fix: keep the submit button disabled while any field is still processing by @SkHCrusher in #20038
- fix: Navigation group enum respects collapsible() when collapsed by @people-sea in #20055
- Fix: Render standalone icon aliases in UI components by @kaungkhantjc in #20061
- fix(translations): translate ja email multi-factor provider strings by @kazaminosuke in #20093
- fix(translations): complete missing Japanese translations across several packages by @kazaminosuke in #20094
- fix: pre-populate tableColumnSearches to prevent JS .length collision on individual column search by @lazerg in #20071
- Change ImageColumn from 'avatar' to 'header_image' by @smiliyas in #20076
- fix: handle focus return when closing nested x-trap modals by @people-sea in #20077
- DateTimePicker: add missing Korean (ko) dayjs locale by @corean in #20090
- fix: add missing key for italian translation by @filippozanardo in #20069
- fix(query-builder): Correct aggregate min/max keys by @parthibarath in #20100
- i18n(vi): complete missing Vietnamese translations in forms package by @thaolaptrinh in #20062
New Contributors
- @pranab-acharya made their first contribution in #20023
- @ashraful19 made their first contribution in #20026
- @KiberGod made their first contribution in #20056
- @SkHCrusher made their first contribution in #20038
- @kaungkhantjc made their first contribution in #20061
- @kazaminosuke made their first contribution in #20093
- @lazerg made their first contribution in #20071
- @filippozanardo made their first contribution in #20069
- @parthibarath made their first contribution in #20100
- @thaolaptrinh made their first contribution in #20062
Full Changelog: v4.11.7...v4.11.8
Original source - Jun 12, 2026
- Date parsed from source:Jun 12, 2026
- First seen by Releasebot:Jun 16, 2026
v3.3.54
Filament adds Laravel 13 support plus PHPStan fixes and security hardening in a small maintenance release.
What's Changed
chore: Add Laravel 13 support by @pranab-acharya in #20023
Backport PHPStan fixes and security hardening from 4.x by @danharrin in #20033New Contributors
@pranab-acharya made their first contribution in #20023
Full Changelog: v3.3.53...v3.3.54
Original source - Jun 12, 2026
- Date parsed from source:Jun 12, 2026
- First seen by Releasebot:Jun 16, 2026
v3.3.53
Filament fixes RichEditor security handling and updates key build dependencies in v3.3.53.
What's Changed
chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19920
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19921
Update dependency postcss to v8.5.10 by @github-actions[bot] in #19986
Update dependency vite to v6.4.2 by @github-actions[bot] in #19987
security: Sanitize disabled RichEditor state by @danharrin in #20029
New Contributors
@github-actions[bot] made their first contribution in #19986
Full Changelog: v3.3.52...v3.3.53
Original source - Jun 8, 2026
- Date parsed from source:Jun 8, 2026
- First seen by Releasebot:Jun 8, 2026
v5.6.7
Filament ships v5.6.7 with a broad set of bug fixes and polish, improving cache handling, builder and repeater behavior, sidebar navigation, Filepond labels, form quoting, top tabs, translations, and release workflows.
What's Changed
chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19920
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19921
fix: avoid null cache key in getComponentByStatePath() by @people-sea in #19992
Fix format-and-build workflow and update km translations by @Chanthoeun in #19998
fix: prevent builder block picker alignment from using null array key by @people-sea in #19999
Update Spanish translations by @luisprmat in #20007
fix: render sidebar navigation item children when parent has no URL by @truffle-dev in #19990
fix: escaping HasWidth@getWidth return value by @Carnicero90 in #19980
fix: overlay parent action modal reopening by @VernSG in #19982
fix: stale dependent fields after item actions in live() Repeater & Builder by @people-sea in #19984
Add per-branch clone instructions to reproduction template README by @ijpatricio in #19981
fix: Filepond drop label cropping when using custom placeholder content by @ahmed-rashad-alnaggar in #20000
Fix horizontal scrolling for top sub-navigation tabs clipping last item by @hamdyelbatal122 in #20010
fix: double quote values in forms by @Tschucki in #20013
fix: Wrong method call in DB notifications docs by @danharrin in #20014
New Contributors
@truffle-dev made their first contribution in #19990
@Tschucki made their first contribution in #20013
Full Changelog: v5.6.6...v5.6.7
Original source - Jun 8, 2026
- Date parsed from source:Jun 8, 2026
- First seen by Releasebot:Jun 8, 2026
v4.11.7
Filament ships v4.11.7 with a batch of bug fixes and maintenance updates, improving builder and repeater behavior, sidebar navigation, forms, Filepond, sub-navigation tabs, translations, and release workflows.
What's Changed
chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19920
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19921
fix: avoid null cache key in getComponentByStatePath() by @people-sea in #19992
Fix format-and-build workflow and update km translations by @Chanthoeun in #19998
fix: prevent builder block picker alignment from using null array key by @people-sea in #19999
Update Spanish translations by @luisprmat in #20007
fix: render sidebar navigation item children when parent has no URL by @truffle-dev in #19990
fix: escaping HasWidth@getWidth return value by @Carnicero90 in #19980
fix: overlay parent action modal reopening by @VernSG in #19982
fix: stale dependent fields after item actions in live() Repeater & Builder by @people-sea in #19984
Add per-branch clone instructions to reproduction template README by @ijpatricio in #19981
fix: Filepond drop label cropping when using custom placeholder content by @ahmed-rashad-alnaggar in #20000
Fix horizontal scrolling for top sub-navigation tabs clipping last item by @hamdyelbatal122 in #20010
fix: double quote values in forms by @Tschucki in #20013
fix: Wrong method call in DB notifications docs by @danharrin in #20014
New Contributors
@truffle-dev made their first contribution in #19990
@Tschucki made their first contribution in #20013
Full Changelog: v4.11.6...v4.11.7
Original source - May 27, 2026
- Date parsed from source:May 27, 2026
- First seen by Releasebot:May 27, 2026
v5.6.6
Filament ships v5.6.6 with a batch of fixes for forms, tables, and builders, including date picker validation, dropdown behavior, repeater queries, CSV import security, and better handling for uploads, relationships, and undo history.
What's Changed
- fix: support Closure in Builder::blockPickerColumns() by @People-Sea in #19889
- fix: prevent original upload before automatic aspect ratio editing by @People-Sea in #19859
- Fix custom datepicker show field validation by @wychoong in #19829
- fix: prevent native select from showing the wrong dynamic option by @People-Sea in #19871
- chore(deps): bump qs and express by @dependabot[bot] in #19898
- chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19904
- chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19905
- Restrict ImportCsv $rows unserialize via allowed_classes => false by @glivter in #19901
- include RestrictsFileUploadsToSchemaComponents to components example by @valpuia in #19899
- Fix: skip relationship query when Repeater has no parent model by @FS-Baz in #19906
- fix(forms): track un-indentation actions in EasyMDE undo history by @hamdyelbatal122 in #19890
- Filament issue reproduction project by @ijpatricio in #19820
- Allow pragmarx/google2fa-qrcode v4 by @achequer in #19908
- fix: Dropdown close on SPA navigate by @danharrin in #19912
- fix: DateTimePicker timezone in parent relationship component by @danharrin in #19911
- fix(tables): resolve BelongsToMany records with the correct primary key by @gehrisandro in #19910
- fix: update outdated Indonesian translations by @VernSG in #19907
New Contributors
- @glivter made their first contribution in #19901
- @FS-Baz made their first contribution in #19906
- @achequer made their first contribution in #19908
- @VernSG made their first contribution in #19907
Full Changelog: v5.6.5...v5.6.6
Original source - May 27, 2026
- Date parsed from source:May 27, 2026
- First seen by Releasebot:May 27, 2026
v4.11.6
Filament fixes forms, tables, and builders with improved datepicker, dropdown, repeater, and relationship behavior, plus safer CSV import handling and updated dependencies. It also adds support for issue reproduction and updates translations.
What's Changed
- fix: support Closure in Builder::blockPickerColumns() by @People-Sea in #19889
- fix: prevent original upload before automatic aspect ratio editing by @People-Sea in #19859
- Fix custom datepicker show field validation by @wychoong in #19829
- fix: prevent native select from showing the wrong dynamic option by @People-Sea in #19871
- chore(deps): bump qs and express by @dependabot[bot] in #19898
- chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19904
- chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19905
- Restrict ImportCsv $rows unserialize via allowed_classes => false by @glivter in #19901
- include RestrictsFileUploadsToSchemaComponents to components example by @valpuia in #19899
- Fix: skip relationship query when Repeater has no parent model by @FS-Baz in #19906
- fix(forms): track un-indentation actions in EasyMDE undo history by @hamdyelbatal122 in #19890
- Filament issue reproduction project by @ijpatricio in #19820
- Allow pragmarx/google2fa-qrcode v4 by @achequer in #19908
- fix: Dropdown close on SPA navigate by @danharrin in #19912
- fix: DateTimePicker timezone in parent relationship component by @danharrin in #19911
- fix(tables): resolve BelongsToMany records with the correct primary key by @gehrisandro in #19910
- fix: update outdated Indonesian translations by @VernSG in #19907
New Contributors
- @glivter made their first contribution in #19901
- @FS-Baz made their first contribution in #19906
- @achequer made their first contribution in #19908
- @VernSG made their first contribution in #19907
Full Changelog: v4.11.5...v4.11.6
Original source - May 22, 2026
- Date parsed from source:May 22, 2026
- First seen by Releasebot:May 22, 2026
v5.6.5
Filament ships security fixes for URL escaping, auth page uploads, login protection, 2FA recovery codes, and sanitized URLs.
What's Changed
- security: Escape ImageColumn and ImageEntry URLs by @danharrin in #19885
- security: Temporary file uploads available on auth pages by @danharrin in #19886
- security: Prevent user enumeration on login page by @danharrin in #19887
- security: Prevent 2FA concurrent recovery code reuse by @danharrin in #19891
- Improve Str::sanitizeUrl to reject malformed javascript URLs by @ukeloop in #19892
Full Changelog: v5.6.4...v5.6.5
Original source - May 22, 2026
- Date parsed from source:May 22, 2026
- First seen by Releasebot:May 22, 2026
v4.11.5
Filament improves security with safer image URLs, stronger login protections, and better upload handling on auth pages.
What's Changed
- security: Escape ImageColumn and ImageEntry URLs by @danharrin in #19885
- security: Temporary file uploads available on auth pages by @danharrin in #19886
- security: Prevent user enumeration on login page by @danharrin in #19887
- security: Prevent 2FA concurrent recovery code reuse by @danharrin in #19891
- Improve Str::sanitizeUrl to reject malformed javascript URLs by @ukeloop in #19892
Full Changelog: v4.11.4...v4.11.5
Original source - May 21, 2026
- Date parsed from source:May 21, 2026
- First seen by Releasebot:May 22, 2026
v3.3.52
Filament adds temporary file uploads on auth pages in a security-focused update.
What's Changed
security: Temporary file uploads available on auth pages by @danharrin in #19886
Full Changelog: v3.3.51...v3.3.52
Original source
Curated by the Releasebot team
Releasebot is an aggregator of official release notes from hundreds of software vendors and thousands of sources.
Our editorial process involves the manual review and audit of release notes procured with the help of automated systems.