# Laravel v12.67.0

- Product: Laravel (https://whatsnew.fyi/product/laravel)
- Vendor: Laravel
- Date: 2026-08-18
- Version: v12.67.0
- Original notes: https://github.com/laravel/framework/releases/tag/v12.67.0
- Permalink: https://whatsnew.fyi/product/laravel/releases/v12.67.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Stricten `upload` to fetch only from request's query string for temporary upload URLs
- **fixed** — Improve `in` validation rule to prevent bypass via loose comparison
- **changed** — Retry timed-out cloud agent long-polls
- **fixed** — Escape single quotes in Postgres JSON path attributes
- **changed** — Promote nested data to top-level managed queue event
- **fixed** — Avoid quadratic wildcard rule expansion

* [12.x] Stricten `upload` to be fetch only from request's query string for temporary upload urls by @crynobone in https://github.com/laravel/framework/pull/61145
* [12.x] Improves `in` validation rule from getting bypass via loose comparison by @crynobone in https://github.com/laravel/framework/pull/61146
* [12.x] Retry timed-out cloud agent long-polls by @kieranbrown in https://github.com/laravel/framework/pull/61178
* [12.x] Escape single quotes in Postgres JSON path attributes by @crynobone in https://github.com/laravel/framework/pull/61192
* [12.x] Promote nested data to top-level managed queue event by @timacdonald in https://github.com/laravel/framework/pull/61225
* [12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @OutlawPlz in https://github.com/laravel/framework/pull/61232