Repository navigation
Laravel 13 support, dependency refresh, CI and fixes - #29
Merged
Moritz Mazetti (Radiergummi) merged 8 commits intoOct 25, 2026
Merged
Conversation
Laravel 10 and 11 are past their security support window. The dev tooling now resolves to testbench 11 / Pest 4 on Laravel 13 (and testbench 10 / Pest 3 on Laravel 12), so the suite actually runs against the version it claims to support. The refreshed lock file supersedes all open Dependabot updates and resolves the 45 advisories reported by `composer audit` (all in dev dependencies). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
- Install jetbrains/phpstorm-attributes so the #[Deprecated] attribute on event getters resolves - Ignore Pest's dynamic test API in tests/Feature - Document why Repository calls flush()/tags() outside the contract - Drop a PHPUnit exception class removed in PHPUnit 12 from @throws Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
ResponseCache exposes flush(), so following the documented ResponseCache::clear() call threw a BadMethodCallException. The facade docblock now lists the actual public API. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
…equest::get() Resolved tags were stored under the resolved value but looked up by the template, so the memo never matched and accumulated one entry per distinct resolved tag for the lifetime of the singleton (a leak under Octane). Request::get() is deprecated in Laravel 13; input() covers the query and body parameters it was used for. Adds feature tests for route and query parameter bindings in tags. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
…rder The README still described Kernel.php registration, listed PHP 8.0 / Laravel 7 as requirements, and used four different, unregistered middleware aliases in its examples. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
Runs the test suite on PHP 8.2–8.5 against Laravel 12 and 13 with lowest and latest dependencies, plus Pint, PHPStan and composer audit. Actions are pinned by commit SHA. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
![github-license-compliance[bot]](https://avatars.githubusercontent.com/u/9919?s=60&v=4){kind=small}
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q
This was referenced Oct 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Brings the package up to date after a long pause. Breaking: drops Laravel 10 and 11, so this should ship as a new major version.
Changes
^13.0constraint.composer auditadvisories. All of them were in dev dependencies, so package users were never affected.ResponseCache::clear()doesn't exist. The facade docblock and README documented it, but the method isflush(), so the README example threw.ResponseCache::replaceBindingnever matched a lookup and grew for the life of the singleton, which leaks memory under Octane. Removed it. Also replacedRequest::get(), deprecated in Laravel 13, withinput(). One side effect: request attributes are no longer used to resolve tag bindings. Route parameters, query and body still are.bootstrap/app.phpregistration, current requirements, one consistent middleware alias, and a warning that the cache must run after authentication.Known issues, not addressed here
Cache tag semantics need a redesign, which is planned as a follow-up:
response-cache:clearandResponseCache::flush()without tags don't remove anything. With default tags configured,delete($uri)also has no effect.file), flushing clears the entire underlying cache store.flush([...])adds the default tags, so flushing one tag clears everything when default tags are set.Verification
Locally on PHP 8.5: tests pass for Laravel 13 (latest and lowest) and Laravel 12 (lowest). Pint, PHPStan and
composer auditare clean.After merging, I'll close the Dependabot PRs and delete the stale
chore/dependabot-*andlaravel-13branches.🤖 Generated with Claude Code
https://claude.ai/code/session_01GGNGyJLoFTM5C474gZPW5q