Laravel Release Notes

[13.x] Register the lazy refresh hook on all connections by @tontonsb in #60359

[13.x] Cache falsy JSON payloads in HTTP client responses by @Button99 in #60357

[13.x] GitHub Actions hardening by @nunomaduro in #60363

[13.x] Bump the github-actions group with 4 updates by @dependabot[bot] in #60364

[13.x] Fix Request::createFromBase() compatibility with Symfony 8.1 by @irabbi360 in #60354

[13.x] Set default cooldown for GitHub Actions updates by @JurianArie in #60368

[13.x] Fix Message::embed data attachment handling by @miladev95 in #60361

[13.x] Namespace the cloud logging formatter by @timacdonald in #60362

[13.x] Grant contents: read to pull requests workflow by @nunomaduro in #60370

[13.x] Respect child queue properties over inherited attributes by @mattiasgeniar in #60369

[13.x] Grant contents: read and pull-requests: write to issues workflow by @nunomaduro in #60371

[13.x] Use least-privilege permissions for pull requests and issues workflows by @nunomaduro in #60372

[13.x] Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in #60373

[13.x] Enable Dependabot auto-merge by @nunomaduro in #60383

[13.x] Foundation\Cloud\Events: remove an unused import and fix docblock by @oliverquynh in #60378

[13.x] Fix StartSession docblock by @oliverquynh in #60375

[13.x] Add JSON Schema array deserializer by @pushpak1300 in #60384

[13.x] Add queue to InspectedJob by @jackbayliss in #60374

[13.x] Fix treatment of null headers by @GrahamCampbell in #60386

[13.x] Add units to DebounceFor by @jackbayliss in #60388

[12.x] Preserve empty HTTP attach contents by @GrahamCampbell in #60291

Fix @params typo in Fluent and MessageBag toPrettyJson() docblocks by @Amirhf1 in #60313

[12.x] Fix regex typo in Env::addVariableToEnvContents that prevented quotin… by @Amirhf1 in #60312

[12.x] Fix Number::trim() returning null for INF and NAN values by @Amirhf1 in #60322

[12.x] Fix FIFO queue name normalization in Cloud managed queues by @kieranbrown in #60316

[12.x] Fix Number::pairs() infinite loop when $by is zero or negative by @Amirhf1 in #60324

[12.x] Ensure path seperators aren't encoded in LocalFilesystemAdapter by @jackbayliss in #60350

[12.x] Ensure config is bound before trying to log deprecation notice by @crynobone in #60376

[13.x] Add stan ignore for MySqlSchemaState by @jackbayliss in #60284

[13.x] Add attachFromStorage helpers to notification MailMessage by @LucasCavalheri in #60268
[13.x] Allow Http Client to be used as PSR Client by @willrowe in #60295
[13.x] Normalize HTTP client header values by @GrahamCampbell in #60292
[13.x] Report MultipleRecordsFoundException from sole() by @PeteBishwhip in #60294
[13.x] Hint unit in UniqueFor by @cosmastech in #60289
[13.x] Fix inverted ratio comparison operators in image dimension validation by @Button99 in #60290
[13.x] Allow scheduler to opt out of pause and interrupt cache checks by @jackbayliss in #60226
[13.x] Enhance Cache attribute to support memoization by @jenky in #60309
[13.x] Indicate an event was skipped by @cosmastech in #60311
[13.x] Fix Illuminate\Http\Response compatibility against Symfony 8.1 by @crynobone in #60318
fix: fix isUniqueConstraintError to catch SQL Server error 2627 by @ErfanMomeniii in #60320
[13.x] Fix FIFO queue name normalization in Cloud managed queues by @kieranbrown in #60315
fix: whereDate and whereTime crash when $column is an Expression by @ahawlitschek in #60314
[13.x] Introduce Bus::bulk() by @jackbayliss in #60297
[13.x] Fix time-sensitive flaky test in NotificationDatabaseChannelTest by @KentarouTakeda in #60333
fix: Add content_id to inline attachment handling in CloudflareTransport by @pablo-gonzalez-helpwan in #60330
[13.x] Add payload to InspectedJob by @jackbayliss in #60326
Added MariaDB vector index capability by @michielvaneerd in #60334
Fix @theme directive collision in health check view by @cathrinevaage in #60340
[13.x] Remove unused variables from tests by @oliverquynh in #60338
[13.x] fix: Queue and Connection attributes in Mailable::queue() and later() by @irabbi360 in #60328
[13.x] Fix ValidationImageFileRuleTest by @jackbayliss in #60348
[13.x] schedule:pause command should error when its disabled by @jackbayliss in #60347

Pull request by @WendellAdriel

Loading web fonts has always involved a bit of ceremony - preload links, @font-face rules, HTTP/2 server push headers. The new @fonts Blade directive handles all of that automatically by reading font manifests generated by the Vite font plugin, injecting the right <link rel="preload"> tags, inline styles, and push headers in one shot.

<!DOCTYPE html>
<html>
<head>
@fonts
@vite("resources/js/app.js")
</head>
</html>

Need only a subset of your configured families on a given page? Pass their aliases:

@fonts(["sans", "mono"])

Pull request by @Orrison

SQS has a 1 MB message size cap, and large job payloads will hit it eventually. This new opt-in feature automatically offloads payloads that exceed the limit to a configured filesystem disk - like S3 - sending a small pointer through the queue instead. Workers pick up the real payload transparently on the other side.

Add an extended_store_options block to your SQS connection config to get started:

'sqs' => [
    // ...
    'extended_store_options' => [
        'enabled' => env('SQS_STORE_ENABLED', false),
        'disk' => env('SQS_STORE_DISK', 's3'),
        'prefix' => env('SQS_STORE_PREFIX', ''),
        'always' => false,
        'cleanup' => true,
    ],
],

Set always to true to route every payload through disk regardless of size. With cleanup enabled, the stored file is removed once the job processes successfully.

Pull request by @imliam

Password managers like 1Password and Safari can read the passwordrules HTML attribute to generate passwords that satisfy your app's policy - no more rejected passwords and frustrated users at registration. The new toPasswordRulesString() method on the Password rule converts your validation constraints into the right format automatically.

<input
type="password"
autocomplete="new-password"
passwordrules="{{ Password::defaults()-&gt;toPasswordRulesString() }}"
/>

The method maps directly from your existing validation rules:

Password::min(12)->max(64)->mixedCase()->numbers()->symbols()->toPasswordRulesString()
// 'minlength: 12; maxlength: 64; required: lower; required: upper; required: digit; required: special;'

Pull request by @jackbayliss

When a queue worker receives a SIGTERM during a deployment, any running job normally has no idea it's about to be cut off. The new Interruptible interface lets jobs react - stop loops, release locks, save state - before the worker shuts down.

use Illuminate\Contracts\Queue\Interruptible;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Foundation\Queue\Queueable;

class SignalJob implements ShouldQueue, Interruptible
{
    use Queueable;

    protected bool $stop = false;

    public function handle(): void
    {
        while (!$this->stop) {
            sleep(1);
            // Do work...
        }
    }

    public function interrupted(int $signal): void
    {
        $this->stop = true;
    }
}

Pull request by @hotmeteor

All-caps strings like CBOR or ALL_CAPS used to pass through Str::studly() unchanged - ucfirst has nothing to do when every letter is already uppercase. An optional normalize: true parameter lowercases all-uppercase word segments before conversion, giving you the expected output.

Str::studly('CBOR', normalize: true) // 'Cbor'
Str::studly('ALL_CAPS', normalize: true) // 'AllCaps'

Mixed-case strings are left untouched, and the default is false so existing behavior is preserved.