From e71f50f664b5b6a6ffbeffac668717bb40c36d93 Mon Sep 17 00:00:00 2001 From: Gary Green Date: Wed, 10 Jul 2019 16:11:28 +0100 Subject: [PATCH 1/5] Move TrustProxies to highest priority - fixes maintenance mode ip whitelist if behind proxy e.g. Cloudflare (#5055) --- app/Http/Kernel.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php index a3d8c48d5..6ee2f77bd 100644 --- a/app/Http/Kernel.php +++ b/app/Http/Kernel.php @@ -14,11 +14,11 @@ class Kernel extends HttpKernel * @var array */ protected $middleware = [ + \App\Http\Middleware\TrustProxies::class, \App\Http\Middleware\CheckForMaintenanceMode::class, \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class, \App\Http\Middleware\TrimStrings::class, \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class, - \App\Http\Middleware\TrustProxies::class, ]; /** From afb7cd7311acd6e88a2c7faccdb8181583488d25 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Milo=C5=A1=20Gavrilovi=C4=87?= Date: Thu, 11 Jul 2019 17:03:22 +0200 Subject: [PATCH 2/5] update deprecated pusher option (#5058) --- config/broadcasting.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/broadcasting.php b/config/broadcasting.php index 3ca45eaa8..3bba1103e 100644 --- a/config/broadcasting.php +++ b/config/broadcasting.php @@ -37,7 +37,7 @@ return [ 'app_id' => env('PUSHER_APP_ID'), 'options' => [ 'cluster' => env('PUSHER_APP_CLUSTER'), - 'encrypted' => true, + 'useTLS' => true, ], ], From ff15a66d8c8d989ce6e1cee6fcc06c4025d06998 Mon Sep 17 00:00:00 2001 From: Artem Pakhomov Date: Mon, 15 Jul 2019 19:41:13 +0300 Subject: [PATCH 3/5] Fixed lodash version (CVE-2019-10744) (#5060) --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 568c8d782..bf85f38e3 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "cross-env": "^5.1", "jquery": "^3.2", "laravel-mix": "^4.0.7", - "lodash": "^4.17.5", + "lodash": "^4.17.13", "popper.js": "^1.12", "resolve-url-loader": "^2.3.1", "sass": "^1.15.2", From ddbbd0e67b804c379f212233e3b1c91a7b649522 Mon Sep 17 00:00:00 2001 From: Guilherme Pressutto Date: Tue, 16 Jul 2019 16:38:28 -0300 Subject: [PATCH 4/5] Using environment variable to set redis prefix (#5062) It was the only redis setting that wasn't overridable by an environment variable. It can help if you have multiple instances using the same `APP_NAME`, e.g. a staging instance --- config/database.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/database.php b/config/database.php index 7f5150aec..921769ca1 100644 --- a/config/database.php +++ b/config/database.php @@ -123,7 +123,7 @@ return [ 'options' => [ 'cluster' => env('REDIS_CLUSTER', 'predis'), - 'prefix' => Str::slug(env('APP_NAME', 'laravel'), '_').'_database_', + 'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_database_'), ], 'default' => [ From f73795ac0569554d3464eecb259aef0d2dc64f72 Mon Sep 17 00:00:00 2001 From: Ryan Purcella Date: Thu, 18 Jul 2019 08:20:32 -0500 Subject: [PATCH 5/5] Update number of Laracasts videos (#5063) --- readme.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/readme.md b/readme.md index 8b5717ed4..c658417aa 100644 --- a/readme.md +++ b/readme.md @@ -25,7 +25,7 @@ Laravel is accessible, powerful, and provides tools required for large, robust a Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework. -If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains over 1400 video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library. +If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains over 1500 video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library. ## Laravel Sponsors