From 84f1136ce692cd466a67d625aa4feefa7802e9a7 Mon Sep 17 00:00:00 2001 From: rivanuff Date: Thu, 3 Sep 2026 20:14:04 +0200 Subject: [PATCH 1/2] feat!: Acorn 5 only (drop Acorn 4 / Laravel 10-11) --- composer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/composer.json b/composer.json index fa2407e..ec271f4 100644 --- a/composer.json +++ b/composer.json @@ -25,7 +25,7 @@ }, "require": { "php": ">=8.2", - "jgrossi/corcel": "^7.0 || ^8.0 || ^9.0", + "jgrossi/corcel": "^9.0", "spatie/laravel-data": "^4.5" }, "require-dev": { From 8ef81482ab961104ac68b6eba0b15d2cc65fccd1 Mon Sep 17 00:00:00 2001 From: rivanuff Date: Thu, 3 Sep 2026 20:22:58 +0200 Subject: [PATCH 2/2] chore: drop stale EOL-Laravel-10 audit.ignore (fixed in Laravel 12) --- composer.json | 7 ------- 1 file changed, 7 deletions(-) diff --git a/composer.json b/composer.json index ec271f4..4cf80e4 100644 --- a/composer.json +++ b/composer.json @@ -10,13 +10,6 @@ }, "platform": { "php": "8.2" - }, - "audit": { - "ignore": { - "PKSA-mdq4-51ck-6kdq": "CRLF injection in default email rule (CVE-2026-48019); no fix for EOL Laravel 10, which this package requires until the Acorn 5 upgrade.", - "PKSA-3r5d-mb8f-1qw9": "Duplicate of CVE-2026-48019 via the FriendsOfPHP advisory database.", - "PKSA-m5cs-t1y6-qpcs": "Temporary signed URL path confusion; no fix for EOL Laravel 10, which this package requires until the Acorn 5 upgrade." - } } }, "support": {