From df7e506a5e0841ed7bf40e3c4a02c58d3676d1d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maurice=20Preu=C3=9F?= Date: Wed, 4 Nov 2026 22:05:30 +0100 Subject: [PATCH] Require patched Laravel and php-jwt versions Raise the minimum versions so installs can no longer resolve releases with known advisories (Dependabot alerts): - laravel/framework / illuminate/*: ^12.69|^13.0 (TokenGuard auth bypass, CRLF injection in the email rule, signed URL path confusion, debug page XSS). Laravel 11 is end of life and gets no fixes, so support for it is dropped. - firebase/php-jwt: ^7.0 (weak encryption in 6.x). - orchestra/testbench: ^10.0|^11.0 to match. Tests pass with both the lowest and the highest allowed versions. --- README.md | 4 ++-- README.stub | 4 ++-- composer.json | 10 +++++----- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 5dfa60d..4e7866e 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ [![Total Downloads](https://img.shields.io/packagist/dt/anikeen/id.svg?style=flat-square)](https://packagist.org/packages/anikeen/id) [![License](https://img.shields.io/packagist/l/anikeen/id.svg?style=flat-square)](https://packagist.org/packages/anikeen/id) -PHP Anikeen ID API Client for Laravel 11+ +PHP Anikeen ID API Client for Laravel 12+ Sign in with Anikeen ID and let your users pay with their Anikeen ID account: one-off orders, subscriptions and physical goods, with invoices, VAT and payment handled by Anikeen ID. @@ -71,7 +71,7 @@ Add to `config/services.php` file: ### Event Listener -In Laravel 11, the default EventServiceProvider provider was removed. Instead, add the listener using the listen method on the Event facade, in your `AppServiceProvider` boot method: +Since Laravel 11, the default EventServiceProvider provider was removed. Instead, add the listener using the listen method on the Event facade, in your `AppServiceProvider` boot method: ```php public function boot(): void diff --git a/README.stub b/README.stub index c87d48b..a7aa976 100644 --- a/README.stub +++ b/README.stub @@ -4,7 +4,7 @@ [![Total Downloads](https://img.shields.io/packagist/dt/anikeen/id.svg?style=flat-square)](https://packagist.org/packages/anikeen/id) [![License](https://img.shields.io/packagist/l/anikeen/id.svg?style=flat-square)](https://packagist.org/packages/anikeen/id) -PHP Anikeen ID API Client for Laravel 11+ +PHP Anikeen ID API Client for Laravel 12+ Sign in with Anikeen ID and let your users pay with their Anikeen ID account: one-off orders, subscriptions and physical goods, with invoices, VAT and payment handled by Anikeen ID. @@ -71,7 +71,7 @@ Add to `config/services.php` file: ### Event Listener -In Laravel 11, the default EventServiceProvider provider was removed. Instead, add the listener using the listen method on the Event facade, in your `AppServiceProvider` boot method: +Since Laravel 11, the default EventServiceProvider provider was removed. Instead, add the listener using the listen method on the Event facade, in your `AppServiceProvider` boot method: ```php public function boot(): void diff --git a/composer.json b/composer.json index 916adb0..00940f5 100644 --- a/composer.json +++ b/composer.json @@ -15,15 +15,15 @@ "require": { "php": "^8.2", "ext-json": "*", - "illuminate/support": "^11.0|^12.0|^13.0", - "illuminate/console": "^11.0|^12.0|^13.0", + "illuminate/support": "^12.69|^13.0", + "illuminate/console": "^12.69|^13.0", "guzzlehttp/guzzle": "^7.8", "socialiteproviders/manager": "^4.6", - "firebase/php-jwt": "^6.10|^7.0" + "firebase/php-jwt": "^7.0" }, "require-dev": { - "laravel/framework": "^11.0|^12.0|^13.0", - "orchestra/testbench": "^9.0|^10.0|^11.0", + "laravel/framework": "^12.69|^13.0", + "orchestra/testbench": "^10.0|^11.0", "phpunit/phpunit": "^11.0|^12.0" }, "autoload": {