v12.67.0
Changed 3
- Stricten `upload` to fetch only from request's query string for temporary upload URLs
- Retry timed-out cloud agent long-polls
- Promote nested data to top-level managed queue event
Fixed 3
- Improve `in` validation rule to prevent bypass via loose comparison
- Escape single quotes in Postgres JSON path attributes
- Avoid quadratic wildcard rule expansion
From Laravel
- [12.x] Stricten
uploadto be fetch only from request's query string for temporary upload urls by @crynobone in https://github.com/laravel/framework/pull/61145 - [12.x] Improves
invalidation rule from getting bypass via loose comparison by @crynobone in https://github.com/laravel/framework/pull/61146 - [12.x] Retry timed-out cloud agent long-polls by @kieranbrown in https://github.com/laravel/framework/pull/61178
- [12.x] Escape single quotes in Postgres JSON path attributes by @crynobone in https://github.com/laravel/framework/pull/61192
- [12.x] Promote nested data to top-level managed queue event by @timacdonald in https://github.com/laravel/framework/pull/61225
- [12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @OutlawPlz in https://github.com/laravel/framework/pull/61232