Commit
583146c
Fortify Hardening v0.7.0 is out! 🔒
Security switches now use a shared parser, so fixes reach published configs after a one-time update.
Protect Laravel Fortify registration and password resets from account enumeration.
https://github.com/pushery/fortify-hardening-for-laravel
GitHubGitHub - pushery/fortify-hardening-for-laravel: Prevent account enumeration in Laravel Fortify with neutral registration and password reset responses, timing protection, and account owner notifications.Prevent account enumeration in Laravel Fortify with neutral registration and password reset responses, timing protection, and account owner notifications. - pushery/fortify-hardening-for-laravel
Running a Laravel API on its own domain? 👀
HTTP API v0.2.0 now serves RFC 9457 problem details on dedicated API hosts—no /api prefix needed. Plus safer .env switches.
Idempotency keys + consistent API errors.
https://github.com/pushery/http-api-for-laravel
GitHubGitHub - pushery/http-api-for-laravel: The IETF HTTP API standards for Laravel: Idempotency-Key replays that compare the request body, and RFC 9457 problem details for every API error.The IETF HTTP API standards for Laravel: Idempotency-Key replays that compare the request body, and RFC 9457 problem details for every API error. - pushery/http-api-for-laravel
Legal Consent v0.58.0 focuses on accessibility. ♿
Consent countdowns now stay still, lists work better with VoiceOver, and email addresses stay intact in notices.
Versioned legal docs and consent audit trails for Laravel.
https://github.com/pushery/legal-consent-for-laravel
GitHubGitHub - pushery/legal-consent-for-laravel: Built to support GDPR/DSGVO-compliant legal consent workflows in Laravel. Render versioned legal documents and maintain an append-only audit ledger showing exactly what each user accepted, acknowledged, or withdrew.Built to support GDPR/DSGVO-compliant legal consent workflows in Laravel. Render versioned legal documents and maintain an append-only audit ledger showing exactly what each user accepted, acknowle...
Visual Feedback v0.29.1 is here! 📸
Magic-link invitation tokens are redacted from saved URLs, and inline forms now grow with the page instead of scrolling in a box.
Screenshot-based feedback for Laravel & Livewire.
https://github.com/pushery/visual-feedback-for-laravel
GitHubGitHub - pushery/visual-feedback-for-laravel: Visual feedback for Laravel and Livewire with client-side screenshot capture, browser and page context, privacy-safe redaction, accessible UI, built-in abuse protection with no external service, and flexible delivery via mail, database, or signed webhoo…Visual feedback for Laravel and Livewire with client-side screenshot capture, browser and page context, privacy-safe redaction, accessible UI, built-in abuse protection with no external service, an...
Webhooks v3.29.0 is out! 🪝
Secret reveal countdowns no longer tick on screen, dashboard lists work better with VoiceOver, and fresh MySQL installs pass SQLens predeploy checks.
Signed inbound + outbound webhooks for Laravel.
https://github.com/pushery/webhooks-for-laravel
GitHubGitHub - pushery/webhooks-for-laravel: An all-in-one, config-gated Laravel toolkit for signed inbound and outbound webhooks, customer-managed endpoints, and delivery observabilityAn all-in-one, config-gated Laravel toolkit for signed inbound and outbound webhooks, customer-managed endpoints, and delivery observability - pushery/webhooks-for-laravel
Sanctum Hardening v0.3.0 brings workspace token management! 🔑
The token screen can now manage another model's tokens, confirm passwords directly, and point quickstarts to an API on a separate domain.
https://github.com/pushery/sanctum-hardening-for-laravel
GitHubGitHub - pushery/sanctum-hardening-for-laravel: Hardens Laravel Sanctum: token abilities without a wildcard, limits on minting, per-token and per-user throttling, and a switch that removes the API.Hardens Laravel Sanctum: token abilities without a wildcard, limits on minting, per-token and per-user throttling, and a switch that removes the API. - pushery/sanctum-hardening-for-laravel
Matomo Analytics v0.42.1 fixes two issues. 🛠️
Invalid redaction regexes now explain the error. SQLens predeploy checks handle PostgreSQL-only migrations on MySQL, MariaDB, and SQLite.
Privacy-first analytics for Laravel.
https://github.com/pushery/matomo-analytics-for-laravel
GitHubGitHub - pushery/matomo-analytics-for-laravel: Privacy-first Matomo analytics for Laravel with cookieless tracking, reports, Web Vitals, batching and bot filtering.Privacy-first Matomo analytics for Laravel with cookieless tracking, reports, Web Vitals, batching and bot filtering. - pushery/matomo-analytics-for-laravel
Production Preflight v0.6.0 is out! 🛠️
The HTTP probe switch now uses a shared .env parser, so future fixes can reach published configs after a one-time update.
Catch unsafe Laravel settings and stale deploy state.
https://github.com/pushery/production-preflight-for-laravel
GitHubGitHub - pushery/production-preflight-for-laravel: Laravel production checks for what passes every test: unsafe settings, a .env that loads other values than it shows, and installs running on stale state.Laravel production checks for what passes every test: unsafe settings, a .env that loads other values than it shows, and installs running on stale state. - pushery/production-preflight-for-laravel
Polyslug v0.28.0 is here! 🌍
Nested slug-only models can now resolve parents from URL paths—even after renames. Plus a new redirectStatus() helper.
Multilingual, SEO-friendly URLs for Laravel Eloquent.
https://github.com/pushery/polyslug-for-laravel
GitHubGitHub - pushery/polyslug-for-laravel: Polyslug gives Laravel Eloquent models multilingual, polymorphic, SEO-friendly URLs by combining editable localized slugs with stable opaque IDs, so routes stay resolvable after renames and can self-heal through canonical redirects with hreflang support built…Polyslug gives Laravel Eloquent models multilingual, polymorphic, SEO-friendly URLs by combining editable localized slugs with stable opaque IDs, so routes stay resolvable after renames and can sel...
Small polish release for Email Magic Link v0.41.1 ✉️
If your app name ends with a period (like "Acme Inc."), magic-link emails no longer add a second one.
Passwordless sign-in via email links or OTPs for Laravel.
https://github.com/pushery/email-magic-link-for-laravel
GitHubGitHub - pushery/email-magic-link-for-laravel: Passwordless email magic-link & OTP authentication for Laravel — standalone or with a correct, no-bypass Fortify 2FA handoff and scanner-safe link consumption.Passwordless email magic-link & OTP authentication for Laravel — standalone or with a correct, no-bypass Fortify 2FA handoff and scanner-safe link consumption. - pushery/email-magic-link-for-la...