dependabot[bot]
b802cd4a65
Bump the minor-updates group across 1 directory with 12 updates
...
Bumps the minor-updates group with 12 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [brick/money](https://github.com/brick/money ) | `0.15.1` | `0.15.2` |
| [dedoc/scramble](https://github.com/dedoc/scramble ) | `0.13.45` | `0.13.47` |
| [filament/filament](https://github.com/filamentphp/panels ) | `5.8.4` | `5.10.1` |
| [inertiajs/inertia-laravel](https://github.com/inertiajs/inertia-laravel ) | `3.3.4` | `3.5.1` |
| [laravel/fortify](https://github.com/laravel/fortify ) | `1.40.0` | `1.41.0` |
| [laravel/framework](https://github.com/laravel/framework ) | `13.33.0` | `13.35.0` |
| [laravel/octane](https://github.com/laravel/octane ) | `2.20.0` | `2.21.0` |
| [laravel/passport](https://github.com/laravel/passport ) | `13.8.0` | `13.9.0` |
| [stechstudio/filament-impersonate](https://github.com/stechstudio/filament-impersonate ) | `5.6.0` | `5.6.1` |
| [tpetry/laravel-postgresql-enhanced](https://github.com/tpetry/laravel-postgresql-enhanced ) | `3.7.0` | `3.8.0` |
| [fumeapp/modeltyper](https://github.com/fumeapp/modeltyper ) | `3.13.0` | `3.14.0` |
| [larastan/larastan](https://github.com/larastan/larastan ) | `3.12.2` | `3.13.0` |
Updates `brick/money` from 0.15.1 to 0.15.2
- [Release notes](https://github.com/brick/money/releases )
- [Changelog](https://github.com/brick/money/blob/main/CHANGELOG.md )
- [Commits](https://github.com/brick/money/compare/0.15.1...0.15.2 )
Updates `dedoc/scramble` from 0.13.45 to 0.13.47
- [Release notes](https://github.com/dedoc/scramble/releases )
- [Commits](https://github.com/dedoc/scramble/compare/v0.13.45...v0.13.47 )
Updates `filament/filament` from 5.8.4 to 5.10.1
- [Commits](https://github.com/filamentphp/panels/compare/v5.8.4...v5.10.1 )
Updates `inertiajs/inertia-laravel` from 3.3.4 to 3.5.1
- [Release notes](https://github.com/inertiajs/inertia-laravel/releases )
- [Changelog](https://github.com/inertiajs/inertia-laravel/blob/3.x/CHANGELOG.md )
- [Commits](https://github.com/inertiajs/inertia-laravel/compare/v3.3.4...v3.5.1 )
Updates `laravel/fortify` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/laravel/fortify/releases )
- [Changelog](https://github.com/laravel/fortify/blob/1.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/fortify/compare/v1.40.0...v1.41.0 )
Updates `laravel/framework` from 13.33.0 to 13.35.0
- [Release notes](https://github.com/laravel/framework/releases )
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/framework/compare/v13.33.0...v13.35.0 )
Updates `laravel/octane` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/laravel/octane/releases )
- [Changelog](https://github.com/laravel/octane/blob/2.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/octane/compare/v2.20.0...v2.21.0 )
Updates `laravel/passport` from 13.8.0 to 13.9.0
- [Release notes](https://github.com/laravel/passport/releases )
- [Changelog](https://github.com/laravel/passport/blob/13.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/passport/compare/v13.8.0...v13.9.0 )
Updates `stechstudio/filament-impersonate` from 5.6.0 to 5.6.1
- [Release notes](https://github.com/stechstudio/filament-impersonate/releases )
- [Commits](https://github.com/stechstudio/filament-impersonate/compare/v5.6.0...v5.6.1 )
Updates `tpetry/laravel-postgresql-enhanced` from 3.7.0 to 3.8.0
- [Changelog](https://github.com/tpetry/laravel-postgresql-enhanced/blob/master/CHANGELOG.md )
- [Commits](https://github.com/tpetry/laravel-postgresql-enhanced/compare/3.7.0...3.8.0 )
Updates `fumeapp/modeltyper` from 3.13.0 to 3.14.0
- [Release notes](https://github.com/fumeapp/modeltyper/releases )
- [Commits](https://github.com/fumeapp/modeltyper/compare/v3.13.0...v3.14.0 )
Updates `larastan/larastan` from 3.12.2 to 3.13.0
- [Release notes](https://github.com/larastan/larastan/releases )
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md )
- [Commits](https://github.com/larastan/larastan/compare/v3.12.2...v3.13.0 )
---
updated-dependencies:
- dependency-name: brick/money
dependency-version: 0.15.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-updates
- dependency-name: dedoc/scramble
dependency-version: 0.13.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-updates
- dependency-name: filament/filament
dependency-version: 5.10.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: inertiajs/inertia-laravel
dependency-version: 3.5.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/fortify
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/framework
dependency-version: 13.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/octane
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/passport
dependency-version: 13.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: stechstudio/filament-impersonate
dependency-version: 5.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-updates
- dependency-name: tpetry/laravel-postgresql-enhanced
dependency-version: 3.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: fumeapp/modeltyper
dependency-version: 3.14.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: larastan/larastan
dependency-version: 3.13.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-12 23:31:40 +00:00
Constantin Graf
0c58896b00
Run OSS Scanner image on Octane/FrankenPHP and bundle Gotenberg
...
Production runs as long-lived Octane workers in FrankenPHP worker mode, so state leaking between requests
(static properties, singletons, ...) is a real risk that php artisan serve cannot reproduce. Base the scanner image
on the production FrankenPHP image, add start-octane.sh (single worker, production Caddyfile) and describe this
class of issue in the threat model.
Bundle Gotenberg (Chromium only) so the PDF export tests pass offline and PDF rendering can be exercised.
2026-10-09 18:10:44 +02:00
Constantin Graf
6301b0f4a1
Clarify that super admins are trusted in OSS Scanner threat model
2026-10-09 18:10:44 +02:00
Constantin Graf
4c993c8eb2
Add OSS Scanner build environment and threat model
2026-10-09 18:10:44 +02:00
Constantin Graf
ae6937d012
Updated auditing extension to v0.0.5
2026-10-09 15:09:41 +02:00
Constantin Graf
1256fa61bd
Updated invoicing extension to v0.0.10
2026-10-09 14:42:41 +02:00
Constantin Graf
d6f80e23fb
Run core PHPUnit tests with extensions enabled in CI
2026-10-09 14:42:41 +02:00
Gregor Vostrak
c994345de9
fix scramble diagnostics in goal resource and requests
2026-10-08 20:47:12 +02:00
Gregor Vostrak
e56a659723
remove PaginatedResourceCollection from goal collection after scramble 0.13 update
2026-10-08 20:47:12 +02:00
Gregor Vostrak
c3529e4373
improve goal target formatting in superadmin interface
2026-10-08 20:47:12 +02:00
Gregor Vostrak
81c923644d
fix broken loading spinner position on initial load
2026-10-08 20:47:12 +02:00
Gregor Vostrak
689b2e93e1
move goal progress calculation out of the resources
2026-10-08 20:47:12 +02:00
Gregor Vostrak
63ca886154
Add goals feature for personal goals with filters
2026-10-08 20:47:12 +02:00
Constantin Graf
5010a5be3a
Use database in API docs diagnostics test so Scramble can read model schemas
2026-10-08 16:39:46 +02:00
Constantin Graf
b05f275fe8
Updated invoicing extension to v0.0.9
2026-10-08 16:39:46 +02:00
Constantin Graf
f01a4111b6
Fix Scramble API docs warnings
...
Remove redundant @var annotations from API resources and defer the user
access in the email unique rule of UserUpdateRequest, so rules() can be
evaluated by Scramble without route model binding. Add a test that fails
on any Scramble diagnostic and tests for the email unique rule.
2026-10-08 16:39:46 +02:00
Gregor Vostrak
4a2f78931a
add playwright e2e support for extensions
2026-10-08 16:07:26 +02:00
Constantin Graf
ed2f19f58b
Fix API docs generation with Scramble 0.13
...
Scramble 0.13 moved the collected resource type of resource collections
to a different template slot, which broke the custom paginated resource
collection extension and the API docs export. Scramble now infers
paginated responses natively, so the extension, the marker interface and
the @return annotations that overrode the inference are removed.
Scramble 0.13 also documents closure routes, so the API fallback routes
are moved to a controller that is excluded from the docs.
Add a test that exports the API docs.
2026-10-08 12:38:03 +02:00
Constantin Graf
fde944a84f
Updated extensions
2026-10-07 18:43:16 +02:00
Constantin Graf
34273a4863
Add audit owner through parent model
...
Models that belong to an organization via a parent model (for example
project members via their project) implement AuditableThroughParent and
return the parent relation. The owner organization of their audits is
taken from the loaded parent if it matches the foreign key, otherwise it
is queried. The declaration is also used to backfill the owner of
existing audits.
2026-10-07 18:43:16 +02:00
Constantin Graf
6fe721fc26
Updated extensions to audit improvement branches
2026-10-07 18:43:16 +02:00
Constantin Graf
f921452419
Add marker for auditable models without owner
...
Models implementing AuditableWithoutOwner intentionally have no audit
owner, either because they belong to neither an organization nor a user,
or because they and their audits have to be kept when the owner is
deleted (for example billing records). Adds helpers and a scope on the
audit model to find audits that are missing an owner although they
should have one.
2026-10-07 18:43:16 +02:00
Constantin Graf
30a90f80e0
Updated extensions to audit improvement branches
2026-10-07 18:43:16 +02:00
Constantin Graf
135984f9ef
Add owner organization and owner user to audits
...
- Rename the audit actor columns user_type/user_id to actor_type/actor_id
- Add owner_organization_id and owner_user_id to the audits table as
foreign keys with cascade on delete, so that the audits of an
organization or user are deleted together with it. The indexes and
foreign keys are created without blocking writes on the large table.
- Fill the owner columns for new audits via CustomAuditable. Organizations
and users no longer record their own deletion audit, since it would
reference the already deleted owner.
2026-10-07 18:43:16 +02:00
Constantin Graf
af54b0db73
Updated auditing extension
2026-10-07 18:43:16 +02:00
Constantin Graf
3fc2cec751
Updated services extension
2026-10-07 18:43:16 +02:00
Constantin Graf
32ac8841bc
Remove debug output from TrustHostsTest
2026-10-07 18:28:29 +02:00
Constantin Graf
1582e6f4c3
Generate profile photo in user factory locally
...
Faker's image() downloads the image from via.placeholder.com, which no
longer exists. Since the domain resolves again but does not respond,
the download (without timeout) hangs and the PHPUnit runs time out.
The profile photo is now generated locally with GD, which also stores a
real image instead of the temporary file path returned by image().
2026-10-07 18:28:29 +02:00
Constantin Graf
01281d80d0
Rename DB_SSLMODE env to DB_SSL_MODE and add DATABASE_URL fallback
...
The Laravel 13 config update made sslmode read DB_SSLMODE, which the
self-hosting examples set to require, breaking instances whose database
does not support SSL. Use DB_SSL_MODE instead so existing values are
ignored again, and fall back to DATABASE_URL when DB_URL is not set.
2026-10-07 16:23:11 +02:00
Gregor Vostrak
bb5a7fb9f9
improve API docs
2026-10-05 17:27:04 +02:00
Constantin Graf
349623d537
Reverted “Updated UUID generation”
2026-09-24 13:31:26 +02:00
Constantin Graf
a9d016d773
Added deletion of refresh tokens in DeletionService
2026-09-24 13:31:26 +02:00
Constantin Graf
2ebbbceefb
Updated billing extension
2026-09-24 13:31:26 +02:00
Gregor Vostrak
e85058aefd
add 1password ignore attributes for time tracker component inputs
2026-09-24 13:28:48 +02:00
Constantin Graf
a86c18ad2d
Prevent non-primary mouse buttons from resizing events
2026-09-24 11:55:32 +02:00
dependabot[bot]
f683c03ff9
Bump the minor-updates group across 1 directory with 5 updates
...
Bumps the minor-updates group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [laravel/fortify](https://github.com/laravel/fortify ) | `1.39.0` | `1.40.0` |
| [laravel/framework](https://github.com/laravel/framework ) | `13.32.0` | `13.33.0` |
| [laravel/octane](https://github.com/laravel/octane ) | `2.19.1` | `2.20.0` |
| [laravel/sail](https://github.com/laravel/sail ) | `1.67.0` | `1.68.0` |
| [laravel/telescope](https://github.com/laravel/telescope ) | `5.24.0` | `5.25.0` |
Updates `laravel/fortify` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/laravel/fortify/releases )
- [Changelog](https://github.com/laravel/fortify/blob/1.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/fortify/compare/v1.39.0...v1.40.0 )
Updates `laravel/framework` from 13.32.0 to 13.33.0
- [Release notes](https://github.com/laravel/framework/releases )
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/framework/compare/v13.32.0...v13.33.0 )
Updates `laravel/octane` from 2.19.1 to 2.20.0
- [Release notes](https://github.com/laravel/octane/releases )
- [Changelog](https://github.com/laravel/octane/blob/2.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/octane/compare/v2.19.1...v2.20.0 )
Updates `laravel/sail` from 1.67.0 to 1.68.0
- [Release notes](https://github.com/laravel/sail/releases )
- [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/sail/compare/v1.67.0...v1.68.0 )
Updates `laravel/telescope` from 5.24.0 to 5.25.0
- [Release notes](https://github.com/laravel/telescope/releases )
- [Changelog](https://github.com/laravel/telescope/blob/5.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/telescope/compare/v5.24.0...v5.25.0 )
---
updated-dependencies:
- dependency-name: laravel/fortify
dependency-version: 1.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/framework
dependency-version: 13.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/octane
dependency-version: 2.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/sail
dependency-version: 1.68.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor-updates
- dependency-name: laravel/telescope
dependency-version: 5.25.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-24 11:35:35 +02:00
Constantin Graf
fa0bbc8cfd
Add permission config to npm-format-check GitHub action
2026-09-24 11:31:38 +02:00
Constantin Graf
fff3502e53
Updated UUID generation
2026-09-24 11:31:38 +02:00
Constantin Graf
e801c4311c
Add new extension auditing
2026-09-24 11:31:38 +02:00
Constantin Graf
2dadf1ef02
Updated Laravel to v13
2026-09-24 10:45:18 +02:00
Constantin Graf
12cc3f27f8
Add check for premium to telemetry and update lookup
2026-09-24 10:45:18 +02:00
Constantin Graf
06a2048771
Add basic e2e tests for admin panel
2026-09-24 10:45:18 +02:00
Constantin Graf
a12ee1b029
Address review feedback on composer updates
...
- Default INERTIA_SSR_ENABLED to false to match .env.example, .env.ci and
.env.production, so existing setups keep the previous behaviour.
- Stop tracking the published Filament assets under /public/fonts/filament and
add them to .gitignore, as recommended by the Filament docs. They are
regenerated by filament:assets via the filament:upgrade post-autoload-dump
hook. /public/css and /public/js are already ignored.
- Drop the now dead theme.css filter from the Vite asset list in app.blade.php,
since the custom Filament theme was removed along with viteTheme().
2026-09-24 10:45:18 +02:00
Constantin Graf
54dc0dbabc
Add psysh to gitignore
2026-09-24 10:45:18 +02:00
Constantin Graf
08f9edbc96
Add additional tests for filament
2026-09-24 10:45:18 +02:00
Constantin Graf
0551c633a3
Add github action to prevent non-tag refs in manifest.json
2026-09-24 10:45:18 +02:00
Constantin Graf
37579b1e5c
Updated compose dependencies
2026-09-24 10:45:18 +02:00
Constantin Graf
b33cf00788
Remove Group from ClockifyTimeEntriesImporter
v0.21.0
2026-09-22 18:08:49 +02:00
Gregor Vostrak
c23f09fb2d
add date range navigation, unify picker components
2026-09-22 15:53:50 +02:00
Gregor Vostrak
a0262addb7
fix e2e submit focus test behaviour
2026-09-22 13:43:42 +02:00